Windows Analysis Report
Legal Document (Vital Important).pdf

Overview

General Information

Sample name: Legal Document (Vital Important).pdf
Analysis ID: 1543565
MD5: bbdb184f5e47888af09df8af8f4e3a4a
SHA1: 8e95ea4b1a3a2bf2c8b0bfe37ed510de9c4bef61
SHA256: 1d202a350c52fc9203e20552c0b4b4b5b1af9f0ada47281b19246aa4976fc56f
Infos:

Detection

Score: 23
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

AI detected landing page (webpage, office document or email)
Detected non-DNS traffic on DNS port
HTML body contains low number of good links
HTML body contains password input but no form action
HTML page contains hidden javascript code
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware

Classification

HTML body contains low number of good links
Source: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP Parser: Number of links: 0
HTML body contains password input but no form action
Source: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP Parser: <input type="password" .../> found but no <form action="...
HTML page contains hidden javascript code
Source: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP Parser: Base64 decoded: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" ...
Source: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP Parser: <input type="password" .../> found
Source: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:57054 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57055 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57091 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57126 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57287 version: TLS 1.2
Detected non-DNS traffic on DNS port
Source: global traffic TCP traffic: 192.168.2.4:57019 -> 1.1.1.1:53
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 85.214.3.151 85.214.3.151
Source: Joe Sandbox View IP Address: 239.255.255.250 239.255.255.250
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=r+tw2EMu+eKkZXW&MD=BrcNGuyO HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP/1.1Host: linkshield.synaq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /scan/id/1t4J5R-0008jf-IF/ts/1729851047/cnf/98739490591342865/url/OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP/1.1Host: linkshield.synaq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEttAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /i/3qDJzHKv HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://linkshield.synaq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /scan/id/1t4J5R-0008jf-IF/ts/1729851047/cnf/98739490591342865/url/OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt HTTP/1.1Host: linkshield.synaq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /vendor-41d390767ba031263a65.js HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bundle-cd0841a72d9fc9b59f08.css HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /main-2a9d55d2c743ffce8209.js HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /vendor-41d390767ba031263a65.js HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /main-2a9d55d2c743ffce8209.js HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /473ad7094608f924460a.woff2 HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get.hidrive.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get.hidrive.com/bundle-cd0841a72d9fc9b59f08.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /2a947e89d2e241121d6f.woff2 HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get.hidrive.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get.hidrive.com/bundle-cd0841a72d9fc9b59f08.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/3qDJzHKv/index HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /144c3a3cc463b12046ef.jpg HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/3qDJzHKv/index HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/manifest.json HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /144c3a3cc463b12046ef.jpg HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/android-chrome-144x144.png HTTP/1.1Host: get.hidrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get.hidrive.com/i/3qDJzHKvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /assets/android-chrome-144x144.png HTTP/1.1Host: get.hidrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=r+tw2EMu+eKkZXW&MD=BrcNGuyO HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic DNS traffic detected: DNS query: linkshield.synaq.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: get.hidrive.com
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_202.10.dr String found in binary or memory: https://get.hidrive.com
Source: chromecache_210.10.dr String found in binary or memory: https://get.hidrive.com/i/3qDJzHKv
Source: chromecache_210.10.dr String found in binary or memory: https://get.hidrive.com/i/3qDJzHKv&#34;
Source: chromecache_210.10.dr String found in binary or memory: https://securemail.synaq.com/message_listing?message_list_direction=0&id=1t4J5R-0008jf-IF
Source: chromecache_202.10.dr String found in binary or memory: https://share.hidrive.com
Source: chromecache_202.10.dr String found in binary or memory: https://share.hidrive.com/assets/android-chrome-256x256.png
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0010
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0011
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0012
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0013
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0020
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0021
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0022
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0023
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0030
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0031
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0032
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0033
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0040
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0041
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0042
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0043
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0050
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0051
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0052
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0053
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0060
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0061
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0062
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0063
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0070
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0071
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0072
Source: chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/0073
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1010
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1011
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1012
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1013
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1014
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1020
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1021
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1022
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1023
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1024
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1030
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1031
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1032
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1033
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1034
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1040
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1041
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1042
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1043
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1044
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1050
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1051
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1052
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1053
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1054
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1060
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1061
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1062
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1063
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1064
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1070
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1072
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1073
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1074
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1101
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1111
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1121
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1131
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1141
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1151
Source: chromecache_209.10.dr, chromecache_213.10.dr String found in binary or memory: https://static.hidrive.com/share/1161
Source: chromecache_210.10.dr String found in binary or memory: https://www.synaq.com
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 57141 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 57187 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57164 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57061 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57126
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57247
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57127
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57248
Source: unknown Network traffic detected: HTTP traffic on port 57106 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57128
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57249
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57129
Source: unknown Network traffic detected: HTTP traffic on port 57129 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57133
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57254
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57134
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57255
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57135
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57256
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57136
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57257
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57250
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57130
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57251
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57131
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57252
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57132
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57253
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 57209 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57037 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57312 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57255 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57198 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57137
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57258
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57138
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57259
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57139
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57023
Source: unknown Network traffic detected: HTTP traffic on port 57095 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57144
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57265
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57024
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57145
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57266
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57146
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57267
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57147
Source: unknown Network traffic detected: HTTP traffic on port 57152 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57268
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57140
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57261
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57141
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57262
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57142
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57263
Source: unknown Network traffic detected: HTTP traffic on port 57301 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57143
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57264
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57260
Source: unknown Network traffic detected: HTTP traffic on port 57244 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57279 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57027
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57148
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57269
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57149
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57029
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57034
Source: unknown Network traffic detected: HTTP traffic on port 57130 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57155
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57276
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57035
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57156
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57277
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57036
Source: unknown Network traffic detected: HTTP traffic on port 57096 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57157
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57278
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57037
Source: unknown Network traffic detected: HTTP traffic on port 57153 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57158
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57279
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57030
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57151
Source: unknown Network traffic detected: HTTP traffic on port 57210 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57272
Source: unknown Network traffic detected: HTTP traffic on port 57073 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57048 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57031
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57152
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57273
Source: unknown Network traffic detected: HTTP traffic on port 57300 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57323 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57153
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57274
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57033
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57154
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57275
Source: unknown Network traffic detected: HTTP traffic on port 57243 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57266 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57270
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57150
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57271
Source: unknown Network traffic detected: HTTP traffic on port 57186 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57062 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57232 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57291 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57038
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57159
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57039
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57045
Source: unknown Network traffic detected: HTTP traffic on port 57105 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57166
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57287
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57046
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57167
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57288
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57168
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57289
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57048
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57169
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57041
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57162
Source: unknown Network traffic detected: HTTP traffic on port 57175 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57283
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57163
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57042
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57284
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57043
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57164
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57285
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57044
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57165
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57286
Source: unknown Network traffic detected: HTTP traffic on port 57280 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57280
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57160
Source: unknown Network traffic detected: HTTP traffic on port 57221 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57281
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57161
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57040
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57282
Source: unknown Network traffic detected: HTTP traffic on port 57139 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57036 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57311 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57207
Source: unknown Network traffic detected: HTTP traffic on port 57197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57208
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57209
Source: unknown Network traffic detected: HTTP traffic on port 57277 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57203
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57204
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57205
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57206
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57210
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57211
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57212
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57213
Source: unknown Network traffic detected: HTTP traffic on port 57174 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57268 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57151 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57222 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57245 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57085 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57163 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57218
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57219
Source: unknown Network traffic detected: HTTP traffic on port 57234 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57215
Source: unknown Network traffic detected: HTTP traffic on port 57107 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57216
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57217
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57100
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57221
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57101
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57222
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57102
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57223
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown Network traffic detected: HTTP traffic on port 57128 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57224
Source: unknown Network traffic detected: HTTP traffic on port 57074 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57220
Source: unknown Network traffic detected: HTTP traffic on port 57200 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57118 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57063 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57185 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57108
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57229
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown Network traffic detected: HTTP traffic on port 57256 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57162 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57086 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57104
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57225
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57105
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57226
Source: unknown Network traffic detected: HTTP traffic on port 57290 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57106
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57227
Source: unknown Network traffic detected: HTTP traffic on port 57233 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57107
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57228
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57111
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57232
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57112
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57233
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57113
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57234
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57114
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57235
Source: unknown Network traffic detected: HTTP traffic on port 57289 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57230
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57110
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57231
Source: unknown Network traffic detected: HTTP traffic on port 57035 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57310 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57119
Source: unknown Network traffic detected: HTTP traffic on port 57196 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57278 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57236
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57116
Source: unknown Network traffic detected: HTTP traffic on port 57140 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57237
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57238
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57118
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57239
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57122
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57243
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57123
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57244
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57124
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57245
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57125
Source: unknown Network traffic detected: HTTP traffic on port 57211 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57246
Source: unknown Network traffic detected: HTTP traffic on port 57024 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57240
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57120
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57241
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57121
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57242
Source: unknown Network traffic detected: HTTP traffic on port 57267 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57097 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57126 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57023 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57287 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57096
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57097
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57098
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57099
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57092
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57093
Source: unknown Network traffic detected: HTTP traffic on port 57075 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57094
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57095
Source: unknown Network traffic detected: HTTP traffic on port 57098 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57241 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57264 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57090
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown Network traffic detected: HTTP traffic on port 57276 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57138 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57304 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57064 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57184 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57230 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57149 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57206 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57173 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57315 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57114 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57034 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57195 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57303 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57252 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57127 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57172 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57207 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57299 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57218 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57087 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57161 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57102 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57288 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57045 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57076 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57150 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57229 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57263 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57116 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57088 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57160 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57231 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57065 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57254 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57219 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57056
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57177
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57298
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57057
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57178
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57299
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57058
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57179
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57059
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57173
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57294
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57174
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57295
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57054
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57175
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57296
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57055
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57176
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57297
Source: unknown Network traffic detected: HTTP traffic on port 57159 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57290
Source: unknown Network traffic detected: HTTP traffic on port 57302 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57314 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57170
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57291
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57171
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57292
Source: unknown Network traffic detected: HTTP traffic on port 57136 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57172
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57293
Source: unknown Network traffic detected: HTTP traffic on port 57033 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57297 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57054 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57194 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57125 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57104 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57188
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57067
Source: unknown Network traffic detected: HTTP traffic on port 57286 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57068
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57189
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57069
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57063
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57184
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57064
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57185
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57065
Source: unknown Network traffic detected: HTTP traffic on port 57183 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57186
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57066
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57187
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57180
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57060
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57181
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57061
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57182
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57062
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57183
Source: unknown Network traffic detected: HTTP traffic on port 57265 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57099 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57298 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57275 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57313 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57078
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57199
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57079
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57195
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57074
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57075
Source: unknown Network traffic detected: HTTP traffic on port 57182 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57196
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57076
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57197
Source: unknown Network traffic detected: HTTP traffic on port 57044 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57077
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57198
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57070
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57191
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57071
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57192
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57072
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57193
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57073
Source: unknown Network traffic detected: HTTP traffic on port 57077 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57194
Source: unknown Network traffic detected: HTTP traffic on port 57220 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57190
Source: unknown Network traffic detected: HTTP traffic on port 57148 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57253 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57085
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57086
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57087
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57088
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57081
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57082
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown Network traffic detected: HTTP traffic on port 57137 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57171 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown Network traffic detected: HTTP traffic on port 57208 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57242 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 57080
Source: unknown Network traffic detected: HTTP traffic on port 57250 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57273 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57055 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57296 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57193 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57215 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57238 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57318 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57090 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57170 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57203 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57100 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57146 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57043 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57135 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57078 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57261 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57147 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57124 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57285 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57067 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57111 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57226 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57249 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57274 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57031 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57056 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57306 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57192 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57169 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57317 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57181 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57158 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57204 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57080 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57305 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57168 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57145 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57122 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57180 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57042 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57205 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57079 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57283 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57113 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57228 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57216 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57272 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57251 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57068 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57156 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57240 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57191 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57057 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57030 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57101 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57217 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57262 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57092 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57157 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57316 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57134 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57295 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57123 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57239 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57284 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57179 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57041 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57112 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57309 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57258 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57235 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57178 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57321 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57155 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57069 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57212 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57132 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57190 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57224 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57081 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57029 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 57167 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:57054 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57055 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57091 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57126 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57287 version: TLS 1.2
Source: classification engine Classification label: sus23.winPDF@39/83@11/5
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-28 01-40-58-389.log Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA Jump to behavior
Source: unknown Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Legal Document (Vital Important).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1620,i,3492531612034781886,6671070241087934824,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,11903440191422035078,3124090331478198123,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1620,i,3492531612034781886,6671070241087934824,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,11903440191422035078,3124090331478198123,262144 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: Legal Document (Vital Important).pdf Initial sample: PDF keyword /JS count = 0
Source: Legal Document (Vital Important).pdf Initial sample: PDF keyword /JavaScript count = 0
Source: A91juzfw2_1hgrn6l_4yw.tmp.0.dr Initial sample: PDF keyword /JS count = 0
Source: A91juzfw2_1hgrn6l_4yw.tmp.0.dr Initial sample: PDF keyword /JavaScript count = 0
Source: Legal Document (Vital Important).pdf Initial sample: PDF keyword stream count = 25
Source: Legal Document (Vital Important).pdf Initial sample: PDF keyword /EmbeddedFile count = 0

Persistence and Installation Behavior
barindex
AI detected landing page (webpage, office document or email)
Source: PDF document LLM: Page contains button: 'REVIEW COURT DOCUMENT' Source: 'PDF document'
Source: PDF document LLM: PDF document contains prominent button: 'review court document'
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1543565 Sample: Legal Document (Vital Impor... Startdate: 28/10/2024 Architecture: WINDOWS Score: 23 20 x1.i.lencr.org 2->20 32 AI detected landing page (webpage, office document or email) 2->32 8 chrome.exe 1 2->8         started        11 Acrobat.exe 18 73 2->11         started        signatures3 process4 dnsIp5 22 192.168.2.4, 138, 443, 49453 unknown unknown 8->22 24 239.255.255.250 unknown Reserved 8->24 13 chrome.exe 8->13         started        16 AcroCEF.exe 108 11->16         started        process6 dnsIp7 26 get.hidrive.com 85.214.3.151, 443, 57030, 57031 STRATOSTRATOAGDE Germany 13->26 28 linkshield.synaq.com 196.35.198.156, 443, 57023, 57024 ISZA South Africa 13->28 30 www.google.com 142.250.185.196, 443, 57027, 57239 GOOGLEUS United States 13->30 18 AcroCEF.exe 2 16->18         started        process8
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
85.214.3.151
 get.hidrive.com Germany
6724 STRATOSTRATOAGDE false
239.255.255.250
 unknown Reserved
unknown unknown false
142.250.185.196
 www.google.com United States
15169 GOOGLEUS false
196.35.198.156
 linkshield.synaq.com South Africa
3741 ISZA false

Private

IP
192.168.2.4

Contacted Domains

Name IP Active
linkshield.synaq.com 196.35.198.156 true
get.hidrive.com 85.214.3.151 true
www.google.com 142.250.185.196 true
x1.i.lencr.org unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://get.hidrive.com/2a947e89d2e241121d6f.woff2 false
    		unknown
    https://get.hidrive.com/assets/manifest.json false
      		unknown
      https://get.hidrive.com/473ad7094608f924460a.woff2 false
        		unknown
        https://get.hidrive.com/bundle-cd0841a72d9fc9b59f08.css false
          		unknown
          https://get.hidrive.com/i/3qDJzHKv false
            		unknown
            https://get.hidrive.com/vendor-41d390767ba031263a65.js false
              		unknown
              https://linkshield.synaq.com/link?id=1t4J5R-0008jf-IF&ts=1729851047&cnf=98739490591342865&url=OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt false
                		unknown
                https://get.hidrive.com/main-2a9d55d2c743ffce8209.js false
                  		unknown
                  https://get.hidrive.com/assets/android-chrome-144x144.png false
                    		unknown
                    https://get.hidrive.com/assets/favicon.ico false
                      		unknown
                      https://get.hidrive.com/api/3qDJzHKv/index false
                        		unknown
                        https://linkshield.synaq.com/scan/id/1t4J5R-0008jf-IF/ts/1729851047/cnf/98739490591342865/url/OfkDbmYYcm_9xQjF_wQzcURK2_8CSEtt false
                          		unknown
                          https://get.hidrive.com/144c3a3cc463b12046ef.jpg false
                            		unknown