Edit tour

Windows Analysis Report
https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N

Overview

General Information

Sample URL:	https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N
Analysis ID:	1544992
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Drops password protected ZIP file

Found suspicious ZIP file

Allocates memory with a write watch (potentially for evading sandboxes)

Creates a process in suspended mode (likely to inject code)

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2008,i,16838366109820561835,7760331261309575191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

unarchiver.exe (PID: 6048 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 7060 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\czhdehiw.vs4" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 7020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

unarchiver.exe (PID: 2276 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 5884 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\ep1rt3ix.njb" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 5712 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49782 version: TLS 1.0

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50010 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49782 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download HTTP/1.1Host: drive.usercontent.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download&confirm=t&uuid=bdd65db3-1ef8-4851-af12-054e1810183e HTTP/1.1Host: drive.usercontent.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ow2PmK8h_nD90-G5J1k6VD-Yfgjw_A81PRGsqBBI3EKab0UDifH7ksIdqkSHtR_I8S5d7jyxWkno7aVkwycrSJKtMohw5x74YWaCd4l9UxJsszXDC4s0aFrmg0j2b7CJsvYfMKWL0Kx2ubQnK3LM-ab45LE0OdDjFAuzzC390FI20RB13UY
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50010 version: TLS 1.2

System Summary

Drops password protected ZIP file

Source: c3927b69-e6ed-4616-98de-ad31d2b75efd.tmp.0.dr	Zip Entry: encrypted
Source: chromecache_44.2.dr	Zip Entry: encrypted

Found suspicious ZIP file

Source: c3927b69-e6ed-4616-98de-ad31d2b75efd.tmp.0.dr	Zip Entry: DETALLE DE ACTUACIN JUDICIAL RAD.05000312110120220006501.bat
Source: chromecache_44.2.dr	Zip Entry: DETALLE DE ACTUACIN JUDICIAL RAD.05000312110120220006501.bat

Source: classification engine

Classification label: mal52.win@26/6@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\c3927b69-e6ed-4616-98de-ad31d2b75efd.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5712:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:612:120:WilError_03

Source: C:\Windows\SysWOW64\unarchiver.exe

File created: C:\Users\user\AppData\Local\Temp\unarchiver.log

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2008,i,16838366109820561835,7760331261309575191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\czhdehiw.vs4" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\ep1rt3ix.njb" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2008,i,16838366109820561835,7760331261309575191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\czhdehiw.vs4" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\ep1rt3ix.njb" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://drive.usercontent.google.com/download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download

LLM: Page contains button: 'Download anyway' Source: '0.0.pages.csv'

Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 13B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 2DD0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 13B0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: AE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 2800000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: AE0000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe TID: 6108	Thread sleep count: 100 > 30			Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe TID: 6108	Thread sleep time: -50000s >= -30000s			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\unarchiver.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\unarchiver.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\unarchiver.exe

Code function: 7_2_0104B1D6 GetSystemInfo,

7_2_0104B1D6

Source: C:\Windows\SysWOW64\unarchiver.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\czhdehiw.vs4" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"			Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\ep1rt3ix.njb" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	11 Process Injection	1 Masquerading	OS Credential Dumping	2 Virtualization/Sandbox Evasion	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	2 Virtualization/Sandbox Evasion	LSASS Memory	3 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Disable or Modify Tools	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
docs.google.com	142.250.181.238	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
drive.usercontent.google.com	172.217.16.193	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	docs.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.193	drive.usercontent.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544992
Start date and time:	2024-10-30 00:05:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@26/6@6/6
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 100 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.142, 173.194.76.84, 142.250.186.35, 34.104.35.123, 142.250.74.195, 142.250.186.67, 52.149.20.212, 192.229.221.95, 40.69.42.241, 199.232.210.172, 13.95.31.18, 93.184.221.240, 172.217.16.195, 2.16.100.168, 88.221.110.91
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N

Simulations

Behavior and APIs

Time	Type	Description
19:07:52	API Interceptor	48x Sleep call for process: unarchiver.exe modified

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Temp\unarchiver.log

Download File

Process:	C:\Windows\SysWOW64\unarchiver.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	modified
Size (bytes):	4195
Entropy (8bit):	5.312678431500213
Encrypted:	false
SSDEEP:	48:RVd7QRyN4tjG8jGb8jG8jGpmjG/jG8jGpnwQRyNjGbSjGawQRyNjGcNjGejG8jGX:7aKT3VaSqLE
MD5:	59F58D784FAEB36D43772EBB0800D70A
SHA1:	C6097C76DD49AE62011D575D45089D79818C6DAD
SHA-256:	6D51F725808443920907CE8E558AF5FCA4340359CCFD64D2E96EEAA40FEC8D66
SHA-512:	40FE1BB5117ECC5F5DA4BF4EE1BDD9ED60781D841AE77A7258B6A4061392F29BADAD4043DB1DFCAED977552FAB5519F2D7F32F8D3F4D072DEC860C5107ACC6E1
Malicious:	false
Reputation:	low
Preview:	10/29/2024 7:07 PM: Unpack: C:\Users\user\Downloads\DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.zip..10/29/2024 7:07 PM: Tmp dir: C:\Users\user\AppData\Local\Temp\czhdehiw.vs4..10/29/2024 7:07 PM: Received from standard out: ..10/29/2024 7:07 PM: Received from standard out: 7-Zip 18.05 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-04-30..10/29/2024 7:07 PM: Received from standard out: ..10/29/2024 7:07 PM: Received from standard out: Scanning the drive for archives:..10/29/2024 7:07 PM: Received from standard out: 1 file, 7099 bytes (7 KiB)..10/29/2024 7:07 PM: Received from standard out: ..10/29/2024 7:07 PM: Received from standard out: Extracting archive: C:\Users\user\Downloads\DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.zip..10/29/2024 7:07 PM: Received from standard out: --..10/29/2024 7:07 PM: Received from standard out: Path = C:\Users\user\Downloads\DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.zip..10/29/2024 7:07

C:\Users\user\Downloads\DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.zip.crdownload (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	7099
Entropy (8bit):	7.951714598143601
Encrypted:	false
SSDEEP:	96:jqN8woO4iJnJVM9wUqGVv+OhSd9QURUpIRHxptK+9nn:jgPj4i1JVyy5QVmRRJd
MD5:	273D44DEAEB3FACB48CA9EBA1E283222
SHA1:	E2FFC1CB05C7B6DBD487E148CA00071522A25297
SHA-256:	F71A9AD6E6EE4B07C761800DE9085057DF9B9176AAD9010A7D566F637F402771
SHA-512:	07481D272B5D2AAF27E28542C5E13CC1D998213B14C3060D03DB82B327B7A94A2318FB2BED6A7C734065648198930E8F7F4967BAEF7DEB0FA3F6F6609D33E7E5
Malicious:	false
Reputation:	low
Preview:	PK.........@YYx.......yK..=.G.DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batupC....:mDETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batb\|.g0..dn[.v{XQ..u.....v...)1N.l..Pcs..dH....W.....z/....bv...GK..Z..".&M..........h....!......".:Q..`.s..}.."......2.h.b....k.\|).Q...n......h.~4.\|O.c....X1.%`.+...#jx....,.....z..d~...W.i....X...b9..zK\.bz......".g...C.B.Z.E&...#xhS...[.d.....#...=".E.N.......9... ...Y.-+J..v..6..,...k8...r.KNW.?.2.ZY.....a...}............/.s..Z.MO.U...... .U..?..........p:..)....p....!...i...+kU6..e..K.#.2.....;.bnd.C..X.Um..S.'......JD.....<...<c..^....._.j...........R..._y....`..Bs...H%.L.G...ax...V...3H.V.,.S^..%. _..x.....J~&...(t..A-_R&.....5x"...S+.H..1.P..gaCx...F...o....Q.O..:..V.......cf)M.(SB..-..)[O.....0.=b....[.G....}........L..u..)..2.....Vq.5.F,.MY.DHa..4..6.!...89.i....1r.....]F..6..N...M.F.Xl.......k.....`.....-..T..%.K_Vl..1..m.S:...=..m..vq.S..tH..3..[..........G.D..A....

C:\Users\user\Downloads\c3927b69-e6ed-4616-98de-ad31d2b75efd.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	7099
Entropy (8bit):	7.951714598143601
Encrypted:	false
SSDEEP:	96:jqN8woO4iJnJVM9wUqGVv+OhSd9QURUpIRHxptK+9nn:jgPj4i1JVyy5QVmRRJd
MD5:	273D44DEAEB3FACB48CA9EBA1E283222
SHA1:	E2FFC1CB05C7B6DBD487E148CA00071522A25297
SHA-256:	F71A9AD6E6EE4B07C761800DE9085057DF9B9176AAD9010A7D566F637F402771
SHA-512:	07481D272B5D2AAF27E28542C5E13CC1D998213B14C3060D03DB82B327B7A94A2318FB2BED6A7C734065648198930E8F7F4967BAEF7DEB0FA3F6F6609D33E7E5
Malicious:	false
Reputation:	low
Preview:	PK.........@YYx.......yK..=.G.DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batupC....:mDETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batb\|.g0..dn[.v{XQ..u.....v...)1N.l..Pcs..dH....W.....z/....bv...GK..Z..".&M..........h....!......".:Q..`.s..}.."......2.h.b....k.\|).Q...n......h.~4.\|O.c....X1.%`.+...#jx....,.....z..d~...W.i....X...b9..zK\.bz......".g...C.B.Z.E&...#xhS...[.d.....#...=".E.N.......9... ...Y.-+J..v..6..,...k8...r.KNW.?.2.ZY.....a...}............/.s..Z.MO.U...... .U..?..........p:..)....p....!...i...+kU6..e..K.#.2.....;.bnd.C..X.Um..S.'......JD.....<...<c..^....._.j...........R..._y....`..Bs...H%.L.G...ax...V...3H.V.,.S^..%. _..x.....J~&...(t..A-_R&.....5x"...S+.H..1.P..gaCx...F...o....Q.O..:..V.......cf)M.(SB..-..)[O.....0.=b....[.G....}........L..u..)..2.....Vq.5.F,.MY.DHa..4..6.!...89.i....1r.....]F..6..N...M.F.Xl.......k.....`.....-..T..%.K_Vl..1..m.S:...=..m..vq.S..tH..3..[..........G.D..A....

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1594
Entropy (8bit):	7.862952554761723
Encrypted:	false
SSDEEP:	24:M5DhErRsW6OTfolVFt/qRyFQCB0RxgawoIqH4B36zPiX9/YhtdHft7:M5dIWGbofFBq+GR2eITI6sf9
MD5:	C66F20F2E39EB2F6A0A4CDBE0D955E5F
SHA1:	575EF086CE461E0EF83662E3ACB3C1A789EBB0A8
SHA-256:	2AB9CD0FFDDDF7BF060620AE328FE626BFA2C004739ADEDB74EC894FAF9BEE31
SHA-512:	B9C44A2113FB078D83E968DC0AF2E78995BB6DD4CA25ABFF31E9AB180849C5DE3036B69931CCA295AC64155D5B168B634E35B7699F3FE65D4A30E9058A2639BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX.WkLSg.....65..A-f....lOk..."2..f[T...9.3q.q.....CnaKX.4.A/\D.l....m1qY....~ik+..F.i..;.A..,.<.NN......~..B..1.f..V....7....?.R..<.r3./...d.....A..h....S.......W^...`...0.......?_M...L.....`M.V.muG.$.e.J+.~Y........B.g?aF.+..M1..[.1. .?2O ...n.y.......XuQ.H. ...A.....+.....b..D..D.y......E.....M o4....R.w..b;`...R..#.\.t.%..]..[....%X<.L.Eo5Umm?..F.Oa1...W`uU:..L<..k..C....7a..1../QD3..U.D.l.T.5H......4...v......=t.."D?b.Pr.~....d#.Q.R.......)9'F/B. ....U.k'...p.!..J...O4.J.)G./"9.6.)@....4.h.(B2I.fB...AD.........7eK.%.O$gP.v.... y.t"9.E...h[...z{.C..[....7.......4......-....X......tJ...a.y....o<P..."..H\MI(Y....Y..A.,.D.$6B..`.Y..B......y..q.m..ci..,F.w......^h&.t...Y.]/......H...d<..cl.c...6N4..8FI....h%.[&u....cd.L.\|...M......."n...&.....d.'t:...c5..{~/7E.(`.`...>V7.RXS.k%..9...l....eRm...%..i...~.@.B..?.".../.v.0.@.c{.(.^w.=....:t=.>........V..}P..`...}.!u..k...p.ye...6.'..,.....Y..........

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	7099
Entropy (8bit):	7.951714598143601
Encrypted:	false
SSDEEP:	96:jqN8woO4iJnJVM9wUqGVv+OhSd9QURUpIRHxptK+9nn:jgPj4i1JVyy5QVmRRJd
MD5:	273D44DEAEB3FACB48CA9EBA1E283222
SHA1:	E2FFC1CB05C7B6DBD487E148CA00071522A25297
SHA-256:	F71A9AD6E6EE4B07C761800DE9085057DF9B9176AAD9010A7D566F637F402771
SHA-512:	07481D272B5D2AAF27E28542C5E13CC1D998213B14C3060D03DB82B327B7A94A2318FB2BED6A7C734065648198930E8F7F4967BAEF7DEB0FA3F6F6609D33E7E5
Malicious:	false
Reputation:	low
URL:	https://drive.usercontent.google.com/download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download&confirm=t&uuid=bdd65db3-1ef8-4851-af12-054e1810183e
Preview:	PK.........@YYx.......yK..=.G.DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batupC....:mDETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.batb\|.g0..dn[.v{XQ..u.....v...)1N.l..Pcs..dH....W.....z/....bv...GK..Z..".&M..........h....!......".:Q..`.s..}.."......2.h.b....k.\|).Q...n......h.~4.\|O.c....X1.%`.+...#jx....,.....z..d~...W.i....X...b9..zK\.bz......".g...C.B.Z.E&...#xhS...[.d.....#...=".E.N.......9... ...Y.-+J..v..6..,...k8...r.KNW.?.2.ZY.....a...}............/.s..Z.MO.U...... .U..?..........p:..)....p....!...i...+kU6..e..K.#.2.....;.bnd.C..X.Um..S.'......JD.....<...<c..^....._.j...........R..._y....`..Bs...H%.L.G...ax...V...3H.V.,.S^..%. _..x.....J~&...(t..A-_R&.....5x"...S+.H..1.P..gaCx...F...o....Q.O..:..V.......cf)M.(SB..-..)[O.....0.=b....[.G....}........L..u..)..2.....Vq.5.F,.MY.DHa..4..6.!...89.i....1r.....]F..6..N...M.F.Xl.......k.....`.....-..T..%.K_Vl..1..m.S:...=..m..vq.S..tH..3..[..........G.D..A....

Static File Info

⊘No static file info

File Icon


Icon Hash:	00b29a8e86828200

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 00:06:40.582377911 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.582467079 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.587889910 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.587910891 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.588145971 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.589277029 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.589343071 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.589350939 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.589469910 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.635324001 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.840760946 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.841322899 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.841351986 CET	443	49708	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:40.841412067 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:40.841412067 CET	49708	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:42.388442993 CET	49674	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:42.388447046 CET	49673	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:42.700948954 CET	49672	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:47.112869024 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:47.112905025 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:47.112966061 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:47.114193916 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:47.114203930 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:48.242130041 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:48.242286921 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.147335052 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.147353888 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.147669077 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.171725988 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.171725988 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.171752930 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.172053099 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.219341040 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.423939943 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.424552917 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.424570084 CET	443	49709	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:49.424688101 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:49.424688101 CET	49709	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:50.684983969 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:50.685005903 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:50.685081005 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:50.687563896 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:50.687575102 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.789936066 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.790038109 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:51.792205095 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:51.792213917 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.792486906 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.794358969 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:51.794497967 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:51.794503927 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.794672966 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:51.839332104 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:51.996247053 CET	49673	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:52.016345024 CET	49674	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:52.042574883 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:52.043556929 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:52.043571949 CET	443	49713	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:52.043618917 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:52.043636084 CET	49713	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:52.242284060 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.242321968 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:52.242386103 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.242655993 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.242669106 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:52.244487047 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.244509935 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:52.244656086 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.244862080 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:52.244880915 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:52.372929096 CET	49672	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:53.096517086 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.097369909 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.099081993 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.099107027 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.099222898 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.099240065 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.099613905 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.099673033 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.099689960 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.099731922 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.100373983 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.100389957 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.100430965 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.100440979 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.101547956 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.101691961 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.101789951 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.101802111 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.101973057 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.101986885 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.142579079 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.142586946 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.146188974 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.185839891 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.491487980 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.491622925 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.614003897 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.614065886 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.614146948 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.629611015 CET	49716	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:06:53.629627943 CET	443	49716	142.250.181.238	192.168.2.6
Oct 30, 2024 00:06:53.655894041 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:53.655946970 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:53.656013966 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:53.656452894 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:53.656466961 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.171045065 CET	443	49705	173.222.162.64	192.168.2.6
Oct 30, 2024 00:06:54.171148062 CET	49705	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:06:54.444601059 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:54.444642067 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:54.444876909 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:54.445369005 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:54.445388079 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:54.533696890 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.534100056 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:54.534125090 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.535212040 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.535300016 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:54.545314074 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:54.545480967 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.548024893 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:54.548039913 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:54.591479063 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:55.139041901 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:55.139098883 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:55.139182091 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:55.146909952 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:55.146949053 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:55.175456047 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.175551891 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.186307907 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.186343908 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.186726093 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.231802940 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.279345989 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404064894 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404092073 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404099941 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404114008 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404148102 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404167891 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.404190063 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.404215097 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.404251099 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.477869034 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.477896929 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.477971077 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.478001118 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.478055954 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.478055954 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.520011902 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.520039082 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.520083904 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.520102978 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.520169020 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.533185005 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:55.533241987 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:55.533390045 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:55.556345940 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:55.556371927 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:55.593111992 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.593138933 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.593190908 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.593230963 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.593251944 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.593488932 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.596287012 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.596306086 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.596368074 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.596378088 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.596425056 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.599391937 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.599409103 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.599478006 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.599488020 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.599550962 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.599637985 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:55.600198984 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:55.600256920 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:55.600281954 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:55.600428104 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:55.602754116 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:55.602807999 CET	443	49720	172.217.16.193	192.168.2.6
Oct 30, 2024 00:06:55.602876902 CET	49720	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:06:55.637326956 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.637352943 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.637403965 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.637429953 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.637482882 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.708440065 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.708467007 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.708514929 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.708547115 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.708589077 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.708602905 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.711369991 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.711386919 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.711457014 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.711463928 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.711508036 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.714484930 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.714503050 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.714560032 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.714618921 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.714623928 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.714670897 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.716706038 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.716722965 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.716806889 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.716813087 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.716949940 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.719157934 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.719175100 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.719223976 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.719229937 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.719264984 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.719284058 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.752348900 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.752372026 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.752418995 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.752434015 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.752479076 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.753199100 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.753259897 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.753264904 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.753278971 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.753328085 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.819344044 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.820590019 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.820617914 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.820664883 CET	49721	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.820674896 CET	443	49721	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.971301079 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.971343994 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.971441984 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.972923994 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.972965002 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.973256111 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.974792004 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.974817991 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.974980116 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.976208925 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.976226091 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.976454020 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.976466894 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.976941109 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.976955891 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.979309082 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.979327917 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.979425907 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.979639053 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.979652882 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.981168985 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.981198072 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:55.981319904 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.982417107 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:55.982430935 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.022816896 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:56.023556948 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:56.023574114 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:56.024574995 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:56.024643898 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:56.035301924 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:56.035475016 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:56.084620953 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:56.084636927 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:06:56.136390924 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:06:56.413825989 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.413903952 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.415632010 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.415642023 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.416868925 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.460908890 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.503325939 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.703522921 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.704353094 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.704385042 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.705336094 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.705342054 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.706254005 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.706321955 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.706567049 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.707737923 CET	49723	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.707752943 CET	443	49723	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.710195065 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.710699081 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.711647034 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.711657047 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.712538004 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.712544918 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.715987921 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.716661930 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.716702938 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.717282057 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.717289925 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.717307091 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.717319965 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.717713118 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.717716932 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.736666918 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.756721973 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.756745100 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.757294893 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.757302046 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.813258886 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.813291073 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.813375950 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.814249039 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:56.814259052 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:56.837109089 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.837140083 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.837208033 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.837223053 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.837270021 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.840534925 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.840749025 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.840822935 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.843441010 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.843460083 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.843514919 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.843528986 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.843575001 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.843780994 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.847446918 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.847673893 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.847745895 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.851113081 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.851128101 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.851171017 CET	49727	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.851178885 CET	443	49727	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.858149052 CET	49729	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.858164072 CET	443	49729	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.864159107 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.864166021 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.864200115 CET	49726	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.864207029 CET	443	49726	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.879272938 CET	49728	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.879281998 CET	443	49728	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.888912916 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.888969898 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.889035940 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.889048100 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.889157057 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.889209986 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.893842936 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.893852949 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.893891096 CET	49725	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.893897057 CET	443	49725	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.916928053 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.916961908 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.917218924 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.920183897 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.920295954 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.920440912 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.925407887 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.925446033 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.925571918 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.926023006 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.926045895 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.926220894 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.926275969 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.926289082 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.926431894 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.926465988 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.927206039 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.927222967 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.927335978 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.927609921 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.927637100 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.928105116 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.928119898 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:56.928395033 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:56.928405046 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.662621975 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.663038015 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.663052082 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.663084984 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.663161039 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.664093971 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.664099932 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.664242029 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.665743113 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.665750027 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.666040897 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.668158054 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.673412085 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.673437119 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.674089909 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.674098969 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.680998087 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.682424068 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.682471037 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.683340073 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.687298059 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.713934898 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.713959932 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.715329885 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.731086016 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.731234074 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.759191990 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.759205103 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.759819031 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.759824991 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.760828972 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.760850906 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.761311054 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.761316061 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.792936087 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.793168068 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.793502092 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.793879986 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.793898106 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.793909073 CET	49735	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.793915033 CET	443	49735	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.798778057 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.798858881 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.798953056 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.799160004 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.799195051 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.802551985 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.802612066 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.802776098 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.802975893 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.802989960 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.802999973 CET	49733	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.803006887 CET	443	49733	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.805485964 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.805512905 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.805624008 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.805876970 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.805886984 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.844269037 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.844343901 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.844551086 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.866060972 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.866061926 CET	49734	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.866102934 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.866134882 CET	443	49734	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.869055033 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.869091988 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.869189024 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.869338036 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.869347095 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.888906002 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.889143944 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.889257908 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.894937992 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.894937992 CET	49731	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.894957066 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.894965887 CET	443	49731	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.901669025 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.901829004 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.901906967 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.912328005 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.912467957 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.912564039 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.956454039 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.956454039 CET	49732	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.956521988 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.956547976 CET	443	49732	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.960969925 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.961011887 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.961110115 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.962840080 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.962881088 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.962938070 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.963099957 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.963121891 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.963310957 CET	49730	443	192.168.2.6	184.28.90.27
Oct 30, 2024 00:06:57.963325977 CET	443	49730	184.28.90.27	192.168.2.6
Oct 30, 2024 00:06:57.963555098 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.963571072 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:57.963753939 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:57.963768959 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.561721087 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.562252998 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.562289000 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.562783003 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.562794924 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.599325895 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.599791050 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.599818945 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.600271940 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.600276947 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.679239035 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.679841995 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.679862022 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.680318117 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.680324078 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.691720963 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.692231894 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.692244053 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.692689896 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.692694902 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.696316004 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.696551085 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.696620941 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.696666002 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.696666002 CET	49739	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.696685076 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.696696043 CET	443	49739	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.699250937 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.699281931 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.699404955 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.699554920 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.699565887 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.704977989 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.705399036 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.705410004 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.705837965 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.705842972 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.733217001 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.733309031 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.733365059 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.733654976 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.733664036 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.733675003 CET	49740	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.733680964 CET	443	49740	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.736664057 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.736720085 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.736794949 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.736928940 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.736942053 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.808996916 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.809151888 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.809273958 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.809472084 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.809478045 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.809488058 CET	49738	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.809493065 CET	443	49738	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.811882019 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.811902046 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.812068939 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.812350035 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.812362909 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.820828915 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.821173906 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.821240902 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.821440935 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.821449041 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.821458101 CET	49742	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.821463108 CET	443	49742	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.823779106 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.823832989 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.824049950 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.824281931 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.824295998 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.837157965 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.837222099 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.837271929 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.837409973 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.837419987 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.837435007 CET	49741	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.837440014 CET	443	49741	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.839987040 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.839997053 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:58.840202093 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.840368986 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:58.840382099 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.443427086 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.444514036 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.444538116 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.445019960 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.445025921 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.472851992 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.472901106 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:59.473018885 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.473810911 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.473822117 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:59.477747917 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.477802992 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:59.477884054 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.478569984 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:06:59.478590012 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:06:59.558057070 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.558664083 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.558691025 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.559197903 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.559202909 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.576658010 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.577081919 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.577131033 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.577183962 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.577198029 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.577212095 CET	49743	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.577217102 CET	443	49743	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.580318928 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.580342054 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.580400944 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.580580950 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.580590963 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.596748114 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.597210884 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.597237110 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.597677946 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.597685099 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.621045113 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.621562958 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.621588945 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.622351885 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.622356892 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.690373898 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.690437078 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.690540075 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.690689087 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.690709114 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.690722942 CET	49745	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.690727949 CET	443	49745	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.693454027 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.693470955 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.693541050 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.693686008 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.693694115 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.731091976 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.731544971 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.731607914 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.731652975 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.731672049 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.731683969 CET	49747	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.731692076 CET	443	49747	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.735364914 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.735404015 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.735464096 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.735635996 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.735654116 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.755789995 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.755862951 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.756438017 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.756438017 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.756438017 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.759018898 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.759059906 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.759129047 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.759304047 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.759325981 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:06:59.980468035 CET	49746	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:06:59.980535030 CET	443	49746	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.343156099 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.343686104 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.343707085 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.344249964 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.344257116 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.438066959 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.438791037 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.438798904 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.439254045 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.439261913 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.469125986 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.469645023 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.469666958 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.470257998 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.470263004 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.479490042 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.479753971 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.479809046 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.479845047 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.479861975 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.479876041 CET	49750	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.479882002 CET	443	49750	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.482804060 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.482841015 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.483045101 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.483146906 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.483159065 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.489063978 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.489444971 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.489468098 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.489886045 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.489892006 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.492434025 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.492814064 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.492871046 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.493273020 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.493288994 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.575925112 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.576004028 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.576158047 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.576268911 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.576276064 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.576291084 CET	49751	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.576294899 CET	443	49751	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.579045057 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.579080105 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.579179049 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.579341888 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.579355955 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.594672918 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.594746113 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.596967936 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.596982956 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.597558975 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.599244118 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.599364996 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.599370003 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.599493027 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.599513054 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.599570990 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.600009918 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.600204945 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.600291014 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.600491047 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.600491047 CET	49752	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.600507975 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.600517035 CET	443	49752	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.601300001 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.601315022 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.601547003 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.602731943 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.602782011 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.602794886 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.602857113 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.603458881 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.603488922 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.603728056 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.603791952 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.603806019 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.622020960 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.622436047 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.622551918 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.622585058 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.622596979 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.622606993 CET	49753	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.622612000 CET	443	49753	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.625098944 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.625157118 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.625231028 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.625406027 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.625436068 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.629180908 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.629599094 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.629673004 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.629714966 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.629740953 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.629759073 CET	49744	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.629765987 CET	443	49744	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.632304907 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.632353067 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.632427931 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.632642031 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:00.632659912 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:00.647326946 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.647336006 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.849045038 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.849512100 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.849556923 CET	443	49749	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.849591970 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.849633932 CET	49749	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.855041981 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.855515003 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.855515003 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.855544090 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.855685949 CET	443	49748	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:00.855766058 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:00.855942011 CET	49748	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:01.238488913 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.239067078 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.239082098 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.239625931 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.239629984 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.335421085 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.335946083 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.335969925 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.336438894 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.336447001 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.345699072 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.346163034 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.346195936 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.346601963 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.346607924 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.351136923 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.351696014 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.351718903 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.352195978 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.352201939 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.370131016 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.370616913 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.370636940 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.371078014 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.371084929 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.371664047 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.371841908 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.371982098 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.372018099 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.372035980 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.372085094 CET	49754	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.372091055 CET	443	49754	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.374643087 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.374685049 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.374761105 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.374948025 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.374963045 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.472419977 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.472503901 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.472558022 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.472738028 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.472764015 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.472781897 CET	49755	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.472790003 CET	443	49755	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.473207951 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.473412037 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.473470926 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.473515987 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.473531961 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.473543882 CET	49757	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.473548889 CET	443	49757	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.476501942 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476543903 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.476669073 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476708889 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476720095 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.476886988 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476897955 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.476926088 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476983070 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.476996899 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.486092091 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.486243010 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.486329079 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.486572981 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.486601114 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.486613989 CET	49756	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.486622095 CET	443	49756	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.489424944 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.489444971 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.489636898 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.489799976 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.489805937 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.499942064 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.500147104 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.500365019 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.501780033 CET	49758	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.501806021 CET	443	49758	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.506431103 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.506485939 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:01.506552935 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.506673098 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:01.506692886 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.132034063 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.150301933 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.150331020 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.153316975 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.153322935 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.210257053 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.227262974 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.231916904 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.235109091 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.238286972 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.238320112 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.239239931 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.239249945 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.239667892 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.239684105 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.240354061 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.240360022 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.241436005 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.241444111 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.242389917 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.242398024 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.243804932 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.243818045 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.244450092 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.244456053 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.282835960 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.282948017 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.283009052 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.299768925 CET	49759	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.299788952 CET	443	49759	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.347150087 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.347208023 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.347275972 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.347891092 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.347910881 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.364708900 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.364974022 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.365036964 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.365641117 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.365668058 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.365688086 CET	49763	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.365695000 CET	443	49763	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.371205091 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.371263981 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.371320009 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.375344038 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.375580072 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.375667095 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.376204967 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.376224995 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.376274109 CET	49761	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.376281023 CET	443	49761	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.382121086 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.382190943 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.382456064 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.382797003 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.382812977 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.382823944 CET	49760	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.382828951 CET	443	49760	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.388293982 CET	49762	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.388309956 CET	443	49762	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.396394014 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.396433115 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.396508932 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.398340940 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.398382902 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.398438931 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.398670912 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.398689032 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.399837017 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.399847984 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.399926901 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.400383949 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.400394917 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.401489973 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.401510954 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.403754950 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.403788090 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:02.403911114 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.404408932 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:02.404422045 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.090589046 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.091212034 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.091247082 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.091763973 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.091770887 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.146703959 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.146869898 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.147299051 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.147344112 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.147430897 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.147463083 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.147761106 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.147768021 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.147849083 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.147864103 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.155430079 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.155818939 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.155857086 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.156260014 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.156265974 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.157584906 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.157891035 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.157907009 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.158287048 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.158293009 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.237236977 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.237333059 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.237385035 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.237581968 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.237607002 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.237617016 CET	49764	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.237623930 CET	443	49764	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.240228891 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.240291119 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.240372896 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.240535021 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.240541935 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.281845093 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.282006025 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.284818888 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.286094904 CET	49768	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.286114931 CET	443	49768	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.291148901 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.291188002 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.291260958 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.291436911 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.291605949 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.291743040 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.291893959 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.291904926 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.292238951 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.292248964 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.292258978 CET	49766	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.292262077 CET	443	49766	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.293375015 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.293720961 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.293771029 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.294295073 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.294320107 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.294336081 CET	49765	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.294342995 CET	443	49765	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.295367956 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.295425892 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.295509100 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.295711040 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.295739889 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.298578024 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.298600912 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.298670053 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.298922062 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.298937082 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.369201899 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.369282961 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.369431019 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.369791031 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.369812965 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.369823933 CET	49767	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.369828939 CET	443	49767	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.376483917 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.376565933 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.376815081 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.377145052 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.377171040 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.976417065 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.993057013 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.993077993 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:03.993772984 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:03.993778944 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.027487993 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.046499968 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.047684908 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.047714949 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.048571110 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.048577070 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.051114082 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.051141977 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.051846027 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.051856041 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.054472923 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.055224895 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.055242062 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.056056976 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.056066036 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.118674040 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.119376898 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.119414091 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.120312929 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.120317936 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.124994040 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.125075102 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.125547886 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.127779007 CET	49771	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.127805948 CET	443	49771	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.142604113 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.142648935 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.142770052 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.152367115 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.152379036 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.173274994 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.173384905 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.173444986 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.180176020 CET	49773	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.180196047 CET	443	49773	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.182252884 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.182413101 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.182470083 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.185580969 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.185601950 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.185622931 CET	49772	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.185628891 CET	443	49772	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.188388109 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.188460112 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.188513994 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.195800066 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.195820093 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.195832014 CET	49774	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.195838928 CET	443	49774	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.202337980 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.202388048 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.202601910 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.204848051 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.204878092 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.204950094 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.205789089 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.205809116 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.207205057 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.207214117 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.210067034 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.210108042 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.210170984 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.210366964 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.210381985 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.252877951 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.252950907 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.253026009 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.269192934 CET	49775	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.269231081 CET	443	49775	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.324282885 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.324326992 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.324395895 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.324765921 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.324780941 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.879267931 CET	49705	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:04.879462004 CET	49705	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:04.880850077 CET	49782	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:04.880907059 CET	443	49782	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:04.880961895 CET	49782	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:04.882036924 CET	49782	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:04.882061005 CET	443	49782	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:04.884664059 CET	443	49705	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:04.884725094 CET	443	49705	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:04.894042015 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.894830942 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.894845009 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.895869017 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.895889044 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.939169884 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.940174103 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.940182924 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.940999031 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.941009998 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.957408905 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.958148003 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.958187103 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.959290981 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.959306955 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.960740089 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.961591005 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.961622000 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:04.962534904 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:04.962541103 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.027021885 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.027585983 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.027650118 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.043937922 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.043966055 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.043978930 CET	49777	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.043987036 CET	443	49777	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.056617022 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.056654930 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.056709051 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.056901932 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.057250023 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.057264090 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.058023930 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.058032990 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.059349060 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.059354067 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.071214914 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.071377039 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.071423054 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.071693897 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.071717978 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.071734905 CET	49779	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.071741104 CET	443	49779	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.079128981 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.079184055 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.079269886 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.079418898 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.079443932 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.090321064 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.090379953 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.090450048 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.091101885 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.091130018 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.091145992 CET	49778	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.091152906 CET	443	49778	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.095231056 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.095376015 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.095428944 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.095752954 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.095773935 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.095788956 CET	49780	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.095794916 CET	443	49780	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.100106955 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.100142956 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.100197077 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.102262020 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.102297068 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.102349043 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.103055000 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.103064060 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.103590012 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.103609085 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.194663048 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.194782972 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.194861889 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.195319891 CET	49781	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.195336103 CET	443	49781	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.201591015 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.201641083 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.201704025 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.202384949 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.202402115 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.552974939 CET	443	49782	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:05.553154945 CET	49782	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:05.817650080 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.819919109 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.819930077 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.821188927 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.821192980 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.821805000 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.822654963 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.822654963 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.822684050 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.822695971 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.855822086 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.868593931 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.868593931 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.868623018 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.868638992 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.932707071 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.933161020 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.933193922 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.936218977 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.936239958 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.946208954 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.946469069 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.948266983 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.948266983 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.948401928 CET	49784	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.948415995 CET	443	49784	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.951138973 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.951201916 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.951441050 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.954356909 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.954356909 CET	49785	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.954363108 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.954399109 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.954408884 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.954416037 CET	443	49785	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.954500914 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.956509113 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.956517935 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.956537962 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.956556082 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.956851006 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.957182884 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:05.957197905 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.997020006 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.997267962 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:05.997426987 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.000350952 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.000350952 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.000366926 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.000370979 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.000488043 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.000559092 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.000559092 CET	49786	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.000565052 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.000575066 CET	443	49786	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.005522013 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.005533934 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.005762100 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.005762100 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.005784035 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.020778894 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:06.020848989 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:06.021059036 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:06.066715956 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.067095995 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.067244053 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.067244053 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.067634106 CET	49787	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.067656040 CET	443	49787	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.069869995 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.069907904 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.071327925 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.071472883 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.071485996 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.128447056 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.128603935 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.128777981 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.128777981 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.128809929 CET	49783	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.128829002 CET	443	49783	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.131684065 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.131736040 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.132211924 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.132211924 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.132251024 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.696971893 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.697516918 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.697547913 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.699284077 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.699291945 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.710026026 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.710463047 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.710477114 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.710880995 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.710886955 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.741252899 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.741844893 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.741857052 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.742316961 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.742363930 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.815967083 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.816445112 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.816507101 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.816962957 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.816977978 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.829027891 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.829085112 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.829135895 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.829340935 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.829364061 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.829377890 CET	49789	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.829385996 CET	443	49789	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.832205057 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.832262039 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.832338095 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.832496881 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.832526922 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.844083071 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.844434977 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.844496012 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.844573975 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.844597101 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.844615936 CET	49790	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.844623089 CET	443	49790	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.847090960 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.847121954 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.847193003 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.847404003 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.847415924 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.877142906 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.877415895 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.877475023 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.877516985 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.877536058 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.877552032 CET	49791	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.877561092 CET	443	49791	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.880425930 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.880460978 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.880520105 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.880670071 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.880681992 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.887499094 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.887881994 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.887895107 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.888323069 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.888328075 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.952245951 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.952326059 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.952392101 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.952778101 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.952778101 CET	49792	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.952826023 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.952852964 CET	443	49792	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.956166029 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.956218004 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:06.956285000 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.956469059 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:06.956491947 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.025932074 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.026004076 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.026077032 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.026348114 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.026367903 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.026379108 CET	49793	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.026385069 CET	443	49793	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.029937983 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.029982090 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.030045033 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.030404091 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.030424118 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.154730082 CET	49722	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:07.154776096 CET	443	49722	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:07.582963943 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.584012985 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.584012985 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.584060907 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.584090948 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.613858938 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.614991903 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.614991903 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.615020037 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.615036011 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.633924961 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.634496927 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.634572029 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.634968996 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.634985924 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.709964037 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.710623980 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.710694075 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.711256027 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.711277008 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.717904091 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.717983007 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.718264103 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.718264103 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.718522072 CET	49794	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.718569994 CET	443	49794	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.721174955 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.721256971 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.721453905 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.721453905 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.721504927 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.772259951 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.772326946 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.772430897 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.772593975 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.772593975 CET	49795	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.772614956 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.772627115 CET	443	49795	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.775481939 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.775549889 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.775794029 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.775913954 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.775935888 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.810305119 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.810400009 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.810642958 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.810642958 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.810714006 CET	49796	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.810729980 CET	443	49796	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.813705921 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.813747883 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.813822985 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.814132929 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.814145088 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.820171118 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.820656061 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.820671082 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.821172953 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.821177959 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.846400976 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.846573114 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.846781015 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.846781015 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.847040892 CET	49797	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.847069025 CET	443	49797	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.849520922 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.849597931 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.849785089 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.849874973 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.849895954 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.955705881 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.955774069 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.956027031 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.956027985 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.956132889 CET	49798	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.956159115 CET	443	49798	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.958910942 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.958950996 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:07.959167004 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.959299088 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:07.959311008 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.490478039 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.490959883 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.490993023 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.491436005 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.491442919 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.531090975 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.531624079 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.531663895 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.532110929 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.532119989 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.546107054 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.546679974 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.546696901 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.547235012 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.547250032 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.579981089 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.580544949 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.580581903 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.581031084 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.581039906 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.621954918 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.622152090 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.622217894 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.622253895 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.622282028 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.622298002 CET	49799	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.622312069 CET	443	49799	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.625546932 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.625595093 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.625806093 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.625993013 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.626008987 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684001923 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684092999 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684303999 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684370041 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684370041 CET	49800	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684398890 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684412003 CET	443	49800	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684479952 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684652090 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684711933 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684878111 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684878111 CET	49801	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.684897900 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.684907913 CET	443	49801	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.687685013 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.687706947 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.687721014 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.687761068 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.687776089 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.687833071 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.687927008 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.687941074 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.688082933 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.688096046 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.691185951 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.691682100 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.691692114 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.692177057 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.692181110 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.708493948 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.709033012 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.709141016 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.709167004 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.709177017 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.709191084 CET	49802	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.709197044 CET	443	49802	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.712079048 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.712112904 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.712205887 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.712348938 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.712359905 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.821805000 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.821990013 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.822063923 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.822451115 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.822451115 CET	49803	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.822473049 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.822484016 CET	443	49803	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.825114012 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.825143099 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:08.825411081 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.825411081 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:08.825447083 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.533926010 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.534390926 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.534406900 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.534853935 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.534859896 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.661782026 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.662287951 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.662331104 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.662806988 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.662811995 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.680124044 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.680193901 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.680396080 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.680440903 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.680459976 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.680469990 CET	49804	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.680474997 CET	443	49804	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.683198929 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.683264017 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.683459044 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.683639050 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.683669090 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.684138060 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.684499025 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.684514999 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.684947014 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.684952974 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.686410904 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.686733961 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.686754942 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.687230110 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.687237978 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.802207947 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.802333117 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.802414894 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.802694082 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.802723885 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.802752018 CET	49806	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.802757978 CET	443	49806	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.805315971 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.805360079 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.805439949 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.805567026 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.805582047 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.818193913 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.818257093 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.818325043 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.818563938 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.818583012 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.818595886 CET	49807	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.818603992 CET	443	49807	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821316957 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821367979 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821520090 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821707964 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821727037 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821726084 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821808100 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821861029 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821954966 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821954966 CET	49808	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.821966887 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.821975946 CET	443	49808	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.823993921 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.824014902 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:09.824306965 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.824456930 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:09.824470043 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.209465027 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.209980965 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.210005045 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.210534096 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.210542917 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.341626883 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.341708899 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.341952085 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.342005014 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.342005014 CET	49805	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.342025995 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.342036009 CET	443	49805	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.344953060 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.344997883 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.345156908 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.345350027 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.345361948 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.577065945 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.577630043 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.577646017 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.578131914 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.578131914 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.578139067 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.578408003 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.578438997 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.578749895 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.578758001 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.648886919 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.649452925 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.649504900 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.649944067 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.649956942 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713004112 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713062048 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713126898 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713273048 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713376045 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713376045 CET	49811	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713437080 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713465929 CET	443	49811	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713478088 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713538885 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713577986 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713602066 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.713634968 CET	49812	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.713643074 CET	443	49812	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.716538906 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.716567993 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.716665983 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.716694117 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.716743946 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.716895103 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.716907024 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.716917992 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.717058897 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.717068911 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.783852100 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.784332991 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.784425020 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.784507990 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.784507990 CET	49809	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.784555912 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.784601927 CET	443	49809	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.787254095 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.787290096 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.787363052 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.787513971 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.787522078 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.934936047 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.935573101 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.935585976 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:10.935971975 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:10.935977936 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.071027040 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.071049929 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.071106911 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.071122885 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.071171999 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.071417093 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.071417093 CET	49810	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.071440935 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.071449995 CET	443	49810	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.074397087 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.074451923 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.074543953 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.074743986 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.074755907 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.079998970 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.080487967 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.080512047 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.080955029 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.080962896 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.211982965 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.212012053 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.212071896 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.212088108 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.212145090 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.212426901 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.212446928 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.212457895 CET	49813	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.212464094 CET	443	49813	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.215419054 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.215459108 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.215655088 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.215826035 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.215840101 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.443391085 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.443917036 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.443944931 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.444499969 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.444506884 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.446223021 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.446595907 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.446630001 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.447032928 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.447038889 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.523247004 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.523929119 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.523943901 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.524580002 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.524585009 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.574692011 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.574716091 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.574798107 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.574815989 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.574994087 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.575082064 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.575208902 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.575222015 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.575254917 CET	49814	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.575261116 CET	443	49814	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.576920033 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.576944113 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.576999903 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.577013016 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.577042103 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.577321053 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.577337980 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.577348948 CET	49815	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.577353001 CET	443	49815	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.578459978 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.578489065 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.578650951 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.578836918 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.578852892 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.579540968 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.579582930 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.579655886 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.579804897 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.579822063 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.658421993 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.658540010 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.658725023 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.658770084 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.658785105 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.658796072 CET	49816	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.658801079 CET	443	49816	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.661487103 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.661520004 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.661802053 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.661953926 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.661968946 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.811398029 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.811901093 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.811927080 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.812366009 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.812371969 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.941992998 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.942075968 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.942151070 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.942312956 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.942331076 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.942344904 CET	49817	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.942351103 CET	443	49817	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.945478916 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.945524931 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.945796967 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.945986032 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.946001053 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.976495028 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.976952076 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.976979017 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:11.977421045 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:11.977427006 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.109666109 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.109750032 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.109833956 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.110044003 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.110064983 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.110080004 CET	49818	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.110085964 CET	443	49818	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.112765074 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.112811089 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.112869978 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.113048077 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.113059044 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.301878929 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.302403927 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.302443981 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.302866936 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.302879095 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.333584070 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.334084988 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.334112883 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.334547043 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.334558010 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.386724949 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.388339043 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.388358116 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.388848066 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.388854027 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.431282997 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.431502104 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.431586027 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.431699038 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.431734085 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.431761980 CET	49819	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.431776047 CET	443	49819	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.436742067 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.436786890 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.436881065 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.437277079 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.437292099 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.467868090 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.467941999 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.468143940 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.468322039 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.468342066 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.468355894 CET	49820	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.468363047 CET	443	49820	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.472467899 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.472548962 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.472687006 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.472831964 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.472871065 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.517106056 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.517170906 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.517380953 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.517884970 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.517904997 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.517923117 CET	49821	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.517926931 CET	443	49821	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.520714045 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.520752907 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.520829916 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.521009922 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.521028042 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.687613010 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.688137054 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.688178062 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.688672066 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.688679934 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.817374945 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.817440033 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.817545891 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.817717075 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.817727089 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.817737103 CET	49822	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.817743063 CET	443	49822	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.820667982 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.820698023 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.820760012 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.820904970 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.820918083 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.849698067 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.850167036 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.850195885 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.850635052 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.850640059 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.983460903 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.983530998 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.983608007 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.983782053 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.983797073 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.983807087 CET	49823	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.983812094 CET	443	49823	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.986689091 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.986732006 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:12.986803055 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.986963987 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:12.986979961 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.171278954 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.171755075 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.171777964 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.172143936 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.172169924 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.226336002 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.226850986 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.226871014 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.227302074 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.227323055 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.275573969 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.276109934 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.276124954 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.276771069 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.276774883 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.279551029 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.279604912 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:13.279747963 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.281058073 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.281097889 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:13.281287909 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.283694983 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.283720970 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:13.283981085 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:13.284013987 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:13.305314064 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.305762053 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.305836916 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.305891991 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.305906057 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.305939913 CET	49824	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.305946112 CET	443	49824	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.310173035 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.310211897 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.310395002 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.310561895 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.310578108 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.360760927 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.360997915 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.361052990 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.361125946 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.361143112 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.361154079 CET	49825	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.361159086 CET	443	49825	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.363943100 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.363980055 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.364166021 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.364322901 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.364336014 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.497457981 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.497486115 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.497540951 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.497580051 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.497615099 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.497831106 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.497845888 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.497890949 CET	49826	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.497898102 CET	443	49826	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.500870943 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.500971079 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.501209021 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.501437902 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.501473904 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.583062887 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.583610058 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.583630085 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.584079981 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.584085941 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.717906952 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.717972994 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.718041897 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.718269110 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.718276024 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.718286991 CET	49827	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.718291998 CET	443	49827	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.720998049 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.721026897 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.721208096 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.721406937 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.721424103 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.722933054 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.723300934 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.723330975 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.723758936 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.723767042 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.855782986 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.855820894 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.855865002 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.855880976 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.855931044 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.856503010 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.856523037 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.856535912 CET	49828	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.856544018 CET	443	49828	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.859442949 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.859477997 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.859550953 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.859718084 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:13.859731913 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:13.995637894 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:13.995673895 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:13.995735884 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:13.996511936 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:13.996525049 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:14.049937010 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.050438881 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.050451040 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.050904989 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.050909996 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.099935055 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.100389004 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.100406885 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.100909948 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.100914001 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.169893980 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.170177937 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.170202017 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.170567989 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.170766115 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.170774937 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.171089888 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.171622992 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.171669960 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.171720028 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.171730042 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.172125101 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.172204971 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.172283888 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.179234982 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.179608107 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.179665089 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.179692030 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.179706097 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.179716110 CET	49831	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.179721117 CET	443	49831	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.182542086 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.182579041 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.182636976 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.182828903 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.182845116 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.216734886 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.216753006 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.219335079 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:14.231127977 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.231209993 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.231353998 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.231501102 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.231518030 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.231529951 CET	49832	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.231534958 CET	443	49832	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.234466076 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.234534979 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.234607935 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.234778881 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.234795094 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.260678053 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.261097908 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.261137962 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.261601925 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.261607885 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.262547970 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:14.396471977 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.396536112 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.396595955 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.396801949 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.396823883 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.396867037 CET	49833	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.396872997 CET	443	49833	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.399707079 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.399760008 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.399822950 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.400011063 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.400027037 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.454984903 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.455488920 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.455516100 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.455954075 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.455960989 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.584847927 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.585066080 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.585119009 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.585175037 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.585268974 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.585289001 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.585299969 CET	49834	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.585304976 CET	443	49834	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.589339972 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.589370012 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.589443922 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.589716911 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.589732885 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.598231077 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.598690987 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.598705053 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.599206924 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.599210978 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.737029076 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.737103939 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.737193108 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.792834997 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.792865038 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.792881012 CET	49835	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.792886972 CET	443	49835	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.828300953 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.828341961 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.828531981 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.828823090 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.828836918 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.949314117 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.959065914 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.959094048 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.959603071 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.959611893 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.966939926 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.975740910 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.975764036 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:14.976522923 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:14.976528883 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.088613987 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.088685036 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.088880062 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.088982105 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.088998079 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.089010000 CET	49837	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.089015961 CET	443	49837	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.091918945 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.091999054 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.092092037 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.092272997 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.092308044 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.101947069 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.102245092 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.102304935 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.102344036 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.102355957 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.102365971 CET	49838	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.102371931 CET	443	49838	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.104938984 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.104984045 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.105087042 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.105856895 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.105870008 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.120291948 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.120374918 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.124151945 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.124454021 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.124469042 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.124660015 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.124681950 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.124756098 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.125205040 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.125210047 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.126646042 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.126713991 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.126718044 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.126842022 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.167339087 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.252126932 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252355099 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252420902 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.252432108 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252485037 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252551079 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.252566099 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252577066 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.252580881 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.252608061 CET	49839	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.252610922 CET	443	49839	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.255696058 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.255706072 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.255799055 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.255984068 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.255995989 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.337009907 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.351663113 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.351686954 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.352917910 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.352925062 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.377355099 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.378113031 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.378128052 CET	443	49836	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:15.378268957 CET	49836	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:15.708187103 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.708262920 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.708344936 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.708590984 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.708611965 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.708642960 CET	49840	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.708650112 CET	443	49840	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.713819027 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.714158058 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.714189053 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.714267969 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.714859962 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.714896917 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.715701103 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.715708017 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.716732979 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.716744900 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.846944094 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.847620010 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.847645044 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848007917 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848040104 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848078966 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848135948 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.848329067 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.848334074 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848572969 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.848582983 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.848592997 CET	49841	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.848597050 CET	443	49841	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.849033117 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.850820065 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.850841045 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.851950884 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.851958036 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.856499910 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.856530905 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.856695890 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.857192993 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.857208014 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.980592966 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.980755091 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.981297016 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:15.982733011 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.982795000 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:15.982860088 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.014363050 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.014374971 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.014389992 CET	49842	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.014394045 CET	443	49842	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.019149065 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.019175053 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.019192934 CET	49843	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.019200087 CET	443	49843	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.021498919 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.024172068 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.024188995 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.024883032 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.024889946 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.038909912 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.038925886 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.039205074 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.039416075 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.039429903 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.041402102 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.041429996 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.041654110 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.042382002 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.042398930 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.156513929 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.156583071 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.156820059 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.162377119 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.162381887 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.162391901 CET	49844	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.162395954 CET	443	49844	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.167342901 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.167378902 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.167653084 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.211915970 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.211934090 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.439086914 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.439579964 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.439595938 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.440089941 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.440094948 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.569761992 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.570230961 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.570275068 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.570291042 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.570341110 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.570382118 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.570386887 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.570395947 CET	49845	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.570400000 CET	443	49845	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.573291063 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.573332071 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.573580980 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.573785067 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.573806047 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.611627102 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.612111092 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.612144947 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.612582922 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.612591028 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.767090082 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:16.767162085 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:16.774118900 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.774669886 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:16.774736881 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.774755955 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:16.774756908 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.775388956 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.775394917 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.780618906 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.781234980 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.781249046 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.781848907 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.781853914 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.785814047 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:16.785913944 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:16.786084890 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:16.786128044 CET	443	49829	172.217.16.193	192.168.2.6
Oct 30, 2024 00:07:16.786185026 CET	49829	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:16.900329113 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.900409937 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.900674105 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.901845932 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.901990891 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.902044058 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.913683891 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.913741112 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.913922071 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.935854912 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.935866117 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.935977936 CET	49846	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.935982943 CET	443	49846	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.937175035 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.937186956 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.937220097 CET	49848	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.937226057 CET	443	49848	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.942910910 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.942928076 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.942938089 CET	49847	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:16.942941904 CET	443	49847	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:16.968283892 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.012793064 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.314327002 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.360003948 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.567059040 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.567084074 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.568407059 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.568422079 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.579319954 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.579349041 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.580159903 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.580168009 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.699786901 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.699832916 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.700016022 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.702693939 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.702845097 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.702898979 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.702971935 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.706120014 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.706199884 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.706368923 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.741976976 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.742012024 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.742083073 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.759157896 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.759186029 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.759527922 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.759569883 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.759782076 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.759795904 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.759804010 CET	49849	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.759809017 CET	443	49849	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.761400938 CET	49850	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.761423111 CET	443	49850	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.766133070 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.766165972 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.766217947 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.789649963 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.789680004 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.828283072 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.828356981 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.828553915 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.832500935 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.832526922 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.839035034 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.839067936 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.839191914 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.839529037 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:17.839539051 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:17.887212992 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:17.887278080 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:17.887393951 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:17.889790058 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:17.889816046 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:18.484769106 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.485197067 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.485268116 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.485914946 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.485929966 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.516813040 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.517365932 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.517380953 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.517873049 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.517879963 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.551023960 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.551526070 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.551547050 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.552189112 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.552195072 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.563142061 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.563648939 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.563678026 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.564105034 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.564111948 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.594296932 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.594924927 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.594949961 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.595385075 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.595413923 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.619554996 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.619589090 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.619637012 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.619643927 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.619680882 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.619949102 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.619949102 CET	49852	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.619966984 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.619978905 CET	443	49852	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.624706984 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.624728918 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.624927998 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.625142097 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.625154972 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.660494089 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.660573006 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.660634995 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.660852909 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.660852909 CET	49851	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.660866976 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.660876036 CET	443	49851	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.664746046 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.664783955 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.664844990 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.665038109 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.665050030 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.691112041 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.691189051 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.691262960 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.691497087 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.691519976 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.691544056 CET	49853	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.691553116 CET	443	49853	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.694505930 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.694542885 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.694665909 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.694885015 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.694904089 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.697477102 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.697556019 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.697675943 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.697711945 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.697720051 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.697735071 CET	49854	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.697740078 CET	443	49854	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.703484058 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.703510046 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.703567028 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.703783035 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.703794003 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.740459919 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.740535975 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.740602970 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.740957975 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.740974903 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.740988970 CET	49855	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.740997076 CET	443	49855	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.743968010 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.743998051 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.744069099 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.744256020 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:18.744273901 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:18.999847889 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:18.999917030 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.004816055 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.004822016 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.005173922 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.007677078 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.007812977 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.007817030 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.007994890 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.055329084 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.258991957 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.259715080 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.259736061 CET	443	49856	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:19.259800911 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.259800911 CET	49856	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:19.384360075 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.384979963 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.385026932 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.386236906 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.386250973 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.407780886 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.408287048 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.408324003 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.409154892 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.409173012 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.440933943 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.442019939 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.442037106 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.442935944 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.442939997 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.489106894 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.489824057 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.489855051 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.491225004 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.491235018 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.508378029 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.509222984 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.509274960 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.510293961 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.510308981 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.527942896 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.528090000 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.528150082 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.528799057 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.528839111 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.528867006 CET	49857	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.528882027 CET	443	49857	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.537221909 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.537254095 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.537420988 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.537652969 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.537672997 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.540555954 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.540678024 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.540735006 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.540740967 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.540790081 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.541393042 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.541424990 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.541439056 CET	49858	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.541448116 CET	443	49858	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.547867060 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.547888994 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.548130989 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.548605919 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.548616886 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.571145058 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.571193933 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.571243048 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.571329117 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.571329117 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.585333109 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.585352898 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.585386038 CET	49860	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.585391998 CET	443	49860	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.625168085 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.625284910 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.625344038 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:19.679244995 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.679337978 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:19.679394960 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.109853029 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.109901905 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.109941959 CET	49859	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.109957933 CET	443	49859	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.113149881 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.113173008 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.113198042 CET	49861	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.113205910 CET	443	49861	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.120866060 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.120903015 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.120955944 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.123235941 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.123261929 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.123342991 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.124910116 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.124927998 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.125178099 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.125363111 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.125374079 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.125823021 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.125839949 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.126297951 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.126311064 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.298877954 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.304968119 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.305943966 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.305963993 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.307445049 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.307451010 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.309119940 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.309138060 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.309683084 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.309693098 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.441629887 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.441751003 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.441873074 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.444905043 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.444931984 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.444989920 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.445017099 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.445056915 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.512609959 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.512609959 CET	49863	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.512669086 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.512697935 CET	443	49863	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.516971111 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.516972065 CET	49862	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.516995907 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.517007113 CET	443	49862	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.661211014 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.661256075 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.661324024 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.674679995 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.674724102 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.674791098 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.675350904 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.675368071 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.676804066 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.676822901 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.857142925 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.862400055 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.880292892 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.880822897 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.880847931 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.882029057 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.882035017 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.882504940 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.882529974 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.883775949 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.883781910 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.885354042 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.885366917 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:20.886693001 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:20.886698008 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.010194063 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.010272980 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.010334969 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.010807037 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.010828018 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.010833979 CET	49865	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.010838985 CET	443	49865	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.014931917 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.014985085 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.015026093 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.015027046 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.015069008 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.015496969 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.015516043 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.015527010 CET	49866	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.015532017 CET	443	49866	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.017028093 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.017066002 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.017134905 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.018884897 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.018899918 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.019607067 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.019733906 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.019774914 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.019776106 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.019823074 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.019951105 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.019954920 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.019964933 CET	49864	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.019968033 CET	443	49864	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.022438049 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.022475004 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.022552967 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.022716045 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.022732973 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.025346994 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.025360107 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.025419950 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.026036024 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.026046991 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.431992054 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.432527065 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.432550907 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.432689905 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.433100939 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.433105946 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.433536053 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.433568001 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.433660030 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.433665037 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.564380884 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.566418886 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.566520929 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.566679955 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.566754103 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.566754103 CET	49867	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.566776991 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.566787004 CET	443	49867	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.567780018 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.567940950 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.567998886 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.567998886 CET	49868	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.568027973 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.568038940 CET	443	49868	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.569694042 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.569720984 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.570245981 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.571021080 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.571024895 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.571033001 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.571064949 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.571240902 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.571347952 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.571360111 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.749177933 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.749771118 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.749809980 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.750266075 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.750272036 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.774404049 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.774975061 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.775017977 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.775338888 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.775473118 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.775482893 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.775918961 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.775957108 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.776144028 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.776149035 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.881236076 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.881324053 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.881539106 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.881539106 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.881596088 CET	49869	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.881613970 CET	443	49869	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.884255886 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.884299994 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.884371996 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.884531975 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.884546995 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908154964 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908550024 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908694029 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.908694029 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.908718109 CET	49871	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.908723116 CET	443	49871	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908900023 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908930063 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.908972025 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.909001112 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.909085989 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.909178019 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.909178019 CET	49870	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.909195900 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.909209013 CET	443	49870	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.911899090 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.911927938 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.912009001 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.912024021 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.912050962 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.912208080 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.912208080 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.912228107 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:21.912261009 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:21.912273884 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.307843924 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.329792023 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.335858107 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.335875988 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.336215019 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.336229086 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.336407900 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.336419106 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.336929083 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.336934090 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.467489958 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.467663050 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.467787981 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.471092939 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.471123934 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.471173048 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.471200943 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.471219063 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.482240915 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.482254028 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.482261896 CET	49873	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.482265949 CET	443	49873	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.518738985 CET	49872	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.518754959 CET	443	49872	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.522479057 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.522553921 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.522624016 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.525783062 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.525804043 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.535940886 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.535974979 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.536043882 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.536221981 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.536228895 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.603737116 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.604279995 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.604300022 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.604927063 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.604932070 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.657126904 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.657696009 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.657716036 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.658162117 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.658168077 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.687068939 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.687594891 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.687622070 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.688108921 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.688117981 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.731790066 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.732222080 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.732279062 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.732409954 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.732434034 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.732443094 CET	49874	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.732448101 CET	443	49874	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.735503912 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.735546112 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.735656977 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.735852003 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.735861063 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.803440094 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.803543091 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.803591967 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.803617954 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.803666115 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.803842068 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.803853035 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.803864956 CET	49876	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.803872108 CET	443	49876	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.806745052 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.806776047 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.806854963 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.807032108 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.807046890 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.821739912 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.822134018 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.822194099 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.822232962 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.822244883 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.822254896 CET	49875	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.822259903 CET	443	49875	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.824609995 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.824637890 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:22.824762106 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.824868917 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:22.824882030 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.270158052 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.270893097 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.270931959 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.271522045 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.271528006 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.275609970 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.276034117 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.276053905 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.276475906 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.276480913 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.402492046 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.402755976 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.402869940 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.402925014 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.402946949 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.402973890 CET	49877	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.402981997 CET	443	49877	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.403178930 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.403589010 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.403645992 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.403649092 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.403697968 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.404453993 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.404470921 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.404484034 CET	49878	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.404488087 CET	443	49878	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.406342030 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406374931 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.406523943 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406570911 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406605959 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.406692028 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406708002 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406718969 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.406795979 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.406810999 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.466185093 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.467118979 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.467145920 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.467626095 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.467633963 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.536818981 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.537416935 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.537437916 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.537919998 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.537925005 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.578212976 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.578701973 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.578722954 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.579152107 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.579157114 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.599203110 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.599694014 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.599755049 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.600042105 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.600066900 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.600080967 CET	49879	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.600089073 CET	443	49879	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.604803085 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.604861021 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.604917049 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.605154037 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.605169058 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.684196949 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.684273958 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.684340954 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.684607983 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.684650898 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.684679985 CET	49880	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.684695005 CET	443	49880	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.687850952 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.687886953 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.688169956 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.688355923 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.688369036 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.729266882 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.729346037 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.729485035 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.729635000 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.729650974 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.729661942 CET	49881	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.729666948 CET	443	49881	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.732978106 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.733012915 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:23.733083010 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.733288050 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:23.733300924 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.134181976 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.134663105 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.134690046 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.135195017 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.135199070 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.158888102 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.159409046 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.159487963 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.159930944 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.159945011 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.265664101 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.265773058 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.265898943 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.266113997 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.266136885 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.266159058 CET	49883	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.266165018 CET	443	49883	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.271677017 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.271714926 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.271924973 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.272186041 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.272198915 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.292782068 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.292861938 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.293023109 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.293102980 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.293103933 CET	49882	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.293143034 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.293169022 CET	443	49882	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.296374083 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.296416998 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.296488047 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.296664953 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.296680927 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.359440088 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.359961033 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.359992027 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.360420942 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.360428095 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.414581060 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.415188074 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.415200949 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.415657043 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.415662050 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.489290953 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.489789009 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.489805937 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.490252018 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.490257025 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.497961044 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.498028994 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.498214006 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.498277903 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.498295069 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.498303890 CET	49884	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.498310089 CET	443	49884	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.501019001 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.501060009 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.501153946 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.501321077 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.501331091 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.544234037 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.544301987 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.544424057 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.544687986 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.544687986 CET	49885	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.544703007 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.544711113 CET	443	49885	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.547858953 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.547889948 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.548011065 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.548213005 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.548227072 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637180090 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637212992 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637263060 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.637274981 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637290001 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637340069 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.637624025 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.637634039 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.637648106 CET	49886	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.637653112 CET	443	49886	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.640165091 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.640197039 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.640388012 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.640651941 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:24.640664101 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:24.721218109 CET	443	49782	173.222.162.64	192.168.2.6
Oct 30, 2024 00:07:24.721309900 CET	49782	443	192.168.2.6	173.222.162.64
Oct 30, 2024 00:07:25.020065069 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.022728920 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.022752047 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.023933887 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.023948908 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.030747890 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.031816006 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.031846046 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.032866955 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.032871962 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.162539959 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.162905931 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.162960052 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.163050890 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.163069010 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.163074970 CET	49888	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.163079977 CET	443	49888	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.164100885 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.164175987 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.164268970 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.164428949 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.164443970 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.164489985 CET	49887	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.164496899 CET	443	49887	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.165996075 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166026115 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.166109085 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166254044 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166265965 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.166476965 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166522026 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.166748047 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166918993 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.166934967 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.248423100 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.248919010 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.248961926 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.249385118 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.249389887 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.282350063 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.282826900 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.282855034 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.283289909 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.283297062 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.376792908 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.377309084 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.377336979 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.377754927 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.377763033 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.381330967 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.381489038 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.381546021 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.381571054 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.381583929 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.381608009 CET	49889	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.381613970 CET	443	49889	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.384212971 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.384258986 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.384342909 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.384459019 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.384480953 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.413712978 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.413741112 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.413831949 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.413855076 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.414091110 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.414103031 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.414125919 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.414154053 CET	49890	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.414160013 CET	443	49890	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.417118073 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.417169094 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.417237997 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.417406082 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.417419910 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.508066893 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.508656979 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.508706093 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.508708954 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.508761883 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.508829117 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.508845091 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.508856058 CET	49891	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.508861065 CET	443	49891	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.511528969 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.511630058 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.511751890 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.512188911 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.512223005 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.919101954 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.919481039 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.919652939 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.919682980 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.919945002 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.920001984 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.920430899 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.920449018 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:25.920450926 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:25.920455933 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.057436943 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.057512045 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.057564974 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.057779074 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.057796955 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.057859898 CET	49893	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.057866096 CET	443	49893	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.061666012 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.061697960 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.061769009 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.061933041 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.061954975 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.065881968 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.065975904 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.066040993 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.066098928 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.066179037 CET	49892	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.066195011 CET	443	49892	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.068522930 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.068562984 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.068659067 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.068870068 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.068880081 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.139483929 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.139997005 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.140037060 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.140434980 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.140448093 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.177323103 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.177781105 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.177812099 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.178210974 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.178215981 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.264319897 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.264806032 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.264854908 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.265223980 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.265229940 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.274517059 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.274627924 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.274674892 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.274710894 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.274751902 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.274785042 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.274802923 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.274816036 CET	49894	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.274822950 CET	443	49894	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.277688980 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.277723074 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.277789116 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.277970076 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.277992010 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.311634064 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.311963081 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.312017918 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.312086105 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.312104940 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.312115908 CET	49895	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.312120914 CET	443	49895	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.314784050 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.314821005 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.314985991 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.315108061 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.315120935 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.401417017 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.401442051 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.401504993 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.401536942 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.401619911 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.401809931 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.401856899 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.401886940 CET	49896	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.401902914 CET	443	49896	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.406172991 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.406219959 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.406452894 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.406707048 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.406729937 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.808538914 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.808938026 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.813159943 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.813201904 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.813910007 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.813931942 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.814435005 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.814456940 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.815037012 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.815046072 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.941322088 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.941452026 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.941498041 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.941550016 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.941598892 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.943398952 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.943428040 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.943448067 CET	49898	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.943454027 CET	443	49898	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.943535089 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.943895102 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.943953037 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.944154024 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.944204092 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.945030928 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.945053101 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.945064068 CET	49897	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.945070028 CET	443	49897	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.948692083 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.948724985 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.948822021 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.951935053 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.951966047 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.952162981 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.952198982 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.952224970 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.956101894 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:26.956115007 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:26.998575926 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.048428059 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.053174973 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.094971895 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.114485025 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.114499092 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.117564917 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.117573023 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.121131897 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.121143103 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.124640942 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.124646902 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.145406008 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.146024942 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.146047115 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.146522999 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.146528006 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.241679907 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.241780996 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.241837025 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.241997957 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.242016077 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.242027044 CET	49899	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.242033005 CET	443	49899	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.244926929 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.244951963 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.245037079 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.245181084 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.245189905 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.251034021 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.251121044 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.251292944 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.251324892 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.251324892 CET	49900	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.251343012 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.251353025 CET	443	49900	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.254195929 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.254292011 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.254390955 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.254590034 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.254630089 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.276648998 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.276778936 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.276918888 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.276943922 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.276957035 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.276974916 CET	49901	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.276981115 CET	443	49901	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.281306028 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.281339884 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.281407118 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.281537056 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.281548977 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.694832087 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.695385933 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.695415020 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.695849895 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.695859909 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.701781988 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.702155113 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.702192068 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.702558994 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.702564955 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.829327106 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.829425097 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.829492092 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.829778910 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.829804897 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.829819918 CET	49903	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.829828024 CET	443	49903	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.832657099 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.832726955 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.832817078 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.833000898 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.833029032 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.836899042 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.836930990 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.836975098 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.836998940 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.837047100 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.837131023 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.837148905 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.837162018 CET	49902	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.837168932 CET	443	49902	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.839503050 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.839545012 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.839657068 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.839838028 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.839854956 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.977770090 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.978329897 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.978349924 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.978775024 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.978780985 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.994540930 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.995302916 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.995368004 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:27.995757103 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:27.995769978 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.049741030 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.050385952 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.050400019 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.051054001 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.051059008 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.118417978 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.118498087 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.118560076 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.118601084 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.118659973 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.118940115 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.118958950 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.118995905 CET	49904	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.119003057 CET	443	49904	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.122224092 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.122261047 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.122414112 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.122668982 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.122684002 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.128243923 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.128635883 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.128786087 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.128853083 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.128853083 CET	49905	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.128904104 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.128927946 CET	443	49905	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.131665945 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.131702900 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.131927967 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.132224083 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.132242918 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.187776089 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.187808990 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.187855959 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.187870026 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.187911034 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.188138008 CET	49906	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.188153982 CET	443	49906	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.195005894 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.195036888 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.195095062 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.195645094 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.195657969 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.567109108 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.567879915 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.567899942 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.569092989 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.569098949 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.585581064 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.586649895 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.586698055 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.587798119 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.587811947 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.698398113 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.698549032 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.698728085 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.698806047 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.698806047 CET	49908	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.698820114 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.698828936 CET	443	49908	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.703169107 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.703223944 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.703303099 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.703471899 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.703490973 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.723556995 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.723664999 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.723823071 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.723875999 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.723875999 CET	49907	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.723916054 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.723941088 CET	443	49907	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.726804972 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.726833105 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.726896048 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.727060080 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.727075100 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.808908939 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:28.808955908 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:28.809099913 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:28.810086012 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:28.810102940 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:28.847965002 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.848485947 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.848509073 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.848947048 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.848952055 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.864272118 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.864943027 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.864969015 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.865243912 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.865259886 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.934757948 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.935787916 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.935823917 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.936229944 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.936234951 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.977772951 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.977904081 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.977972031 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.978202105 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.978215933 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.978250027 CET	49909	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.978256941 CET	443	49909	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.983843088 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.983866930 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.983949900 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.984143019 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.984153032 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.994843006 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.994942904 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.995065928 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.995183945 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.995183945 CET	49910	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.995207071 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.995219946 CET	443	49910	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.998275995 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.998328924 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:28.998490095 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.998704910 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:28.998720884 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.066883087 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.066972017 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.067102909 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.067225933 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.067239046 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.067286015 CET	49911	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.067291021 CET	443	49911	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.070194960 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.070235014 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.070293903 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.070452929 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.070471048 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.461249113 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.472520113 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.472559929 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.476020098 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.476032019 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.484808922 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.530823946 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.580476046 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.580502033 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.581783056 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.581789017 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.607147932 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.607270002 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.607333899 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.607336044 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.607388973 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.628902912 CET	49912	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.628927946 CET	443	49912	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.632909060 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.632966042 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.633140087 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.634335995 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.634361029 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.704658031 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.705126047 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.705142021 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.705569029 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.705574036 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.714143991 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.714252949 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.714380026 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.714452982 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.714468956 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.714478016 CET	49913	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.714483023 CET	443	49913	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.717986107 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.718022108 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.718296051 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.718452930 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.718467951 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.720031977 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.720516920 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.720551014 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.721060038 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.721065998 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.806924105 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.807684898 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.807702065 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.808135033 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.808142900 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.832739115 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.832765102 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.832820892 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.832830906 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.832845926 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.832905054 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.833175898 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.833188057 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.833219051 CET	49915	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.833228111 CET	443	49915	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.836373091 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.836415052 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.836518049 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.836643934 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.836658001 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.847960949 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.848179102 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.848254919 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.848314047 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.848335981 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.848339081 CET	49916	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.848345995 CET	443	49916	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.851280928 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.851347923 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.851422071 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.851589918 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.851613045 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.926062107 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:29.926146984 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:29.933784962 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:29.933799028 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:29.934056997 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:29.935554981 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:29.935863018 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:29.935868979 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:29.935992956 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:29.936170101 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.936891079 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.936952114 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.937016010 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.937102079 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.937136889 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.937166929 CET	49917	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.937186003 CET	443	49917	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.946077108 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.946115971 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.946182013 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.946343899 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:29.946357012 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:29.979335070 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:30.188148022 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:30.188678980 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:30.188698053 CET	443	49914	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:30.188724041 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:30.188761950 CET	49914	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:30.357441902 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.357929945 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.357949018 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.358392000 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.358397007 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.467175007 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.467708111 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.467787027 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.468182087 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.468198061 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.486984015 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.487112999 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.487166882 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.487389088 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.487402916 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.487412930 CET	49918	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.487418890 CET	443	49918	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.490451097 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.490551949 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.490648031 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.490824938 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.490855932 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.574363947 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.575162888 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.575189114 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.576343060 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.576349974 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.585483074 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.586106062 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.586186886 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.586572886 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.586594105 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.601638079 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.601687908 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.601747036 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.601766109 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.601850986 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.602036953 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.602088928 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.602118969 CET	49919	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.602135897 CET	443	49919	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.604967117 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.605005026 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.605202913 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.605395079 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.605405092 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.683700085 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.684595108 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.684623003 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.685167074 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.685173035 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.705828905 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.706165075 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.706222057 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.706274033 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.706295013 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.706305027 CET	49920	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.706310987 CET	443	49920	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.709173918 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.709213018 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.709269047 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.709440947 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.709455013 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.713862896 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.713892937 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.713973045 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.714040041 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.714142084 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.714142084 CET	49921	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.714188099 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.714196920 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.714247942 CET	443	49921	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.717258930 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.717298985 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.717540026 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.717768908 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.717782021 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813492060 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813518047 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813576937 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.813591957 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813649893 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813699961 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.813954115 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.813971043 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.813980103 CET	49922	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.813986063 CET	443	49922	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.817055941 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.817104101 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:30.817166090 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.817329884 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:30.817344904 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.223038912 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.223557949 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.223604918 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.224019051 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.224026918 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.354830980 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.354912043 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.355062962 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.355179071 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.355422974 CET	49923	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.355465889 CET	443	49923	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.359128952 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.359632015 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.359652996 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.360032082 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.360074997 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.360095978 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.360100031 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.360137939 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.360251904 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.360268116 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.429029942 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.429613113 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.429632902 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.430069923 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.430077076 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.453279972 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.453804016 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.453821898 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.454258919 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.454269886 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.494585991 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.494646072 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.494724989 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.494986057 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.494986057 CET	49924	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.495006084 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.495016098 CET	443	49924	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.499171972 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.499224901 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.499377966 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.499520063 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.499526024 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.550344944 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.550833941 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.550857067 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.551290989 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.551307917 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.559751034 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.559803963 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.559859991 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.559880972 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.559926033 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.560187101 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.560204029 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.560215950 CET	49925	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.560220957 CET	443	49925	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.563036919 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.563082933 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.563158989 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.563291073 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.563302994 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.585195065 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.585314035 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.585443020 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.585566998 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.585583925 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.585678101 CET	49926	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.585685968 CET	443	49926	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.588387012 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.588418961 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.588521957 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.588728905 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.588742018 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.680413008 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.680470943 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.680514097 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.680537939 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.680568933 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.680799007 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.680820942 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.680831909 CET	49927	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.680838108 CET	443	49927	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.683228016 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.683267117 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:31.683337927 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.683727980 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:31.683743000 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.090804100 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.091492891 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.091516972 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.091953039 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.091958046 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.221451044 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.221587896 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.221647024 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.221837044 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.221858025 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.221873045 CET	49928	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.221879959 CET	443	49928	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.224715948 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.224756002 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.224833012 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.224980116 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.224996090 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.234437943 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.234847069 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.234877110 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.235296011 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.235301971 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.292912960 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.293697119 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.293730021 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.294490099 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.294503927 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.347666025 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.349754095 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.349796057 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.350560904 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.350567102 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.364873886 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.364903927 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.364958048 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.364978075 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.365020990 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.365277052 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.365298986 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.365313053 CET	49929	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.365322113 CET	443	49929	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.368151903 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.368192911 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.368271112 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.368413925 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.368428946 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.421164989 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.421288013 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.421499968 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.421535015 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.421550035 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.421561956 CET	49930	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.421566963 CET	443	49930	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.424335957 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.424379110 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.424453020 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.424680948 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.424696922 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.439730883 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.440210104 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.440232038 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.440721035 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.440727949 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.482422113 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.482458115 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.482508898 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.482532978 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.482570887 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.482860088 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.482877016 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.482892990 CET	49931	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.482899904 CET	443	49931	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.485687017 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.485711098 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.485897064 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.486056089 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.486066103 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.580359936 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.580429077 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.580621004 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.580703974 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.580718040 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.580727100 CET	49932	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.580732107 CET	443	49932	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.583565950 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.583599091 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.583775043 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.583956003 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.583971977 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.980662107 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.981158972 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.981237888 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:32.981601000 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:32.981617928 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.113866091 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.114013910 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.114082098 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.114211082 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.114233017 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.114252090 CET	49933	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.114259005 CET	443	49933	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.117151022 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.117198944 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.117273092 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.117403984 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.117418051 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.129245043 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.129699945 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.129719019 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.130152941 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.130160093 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.173876047 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.174429893 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.174465895 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.174860001 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.174866915 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.238315105 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.238789082 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.238830090 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.239243031 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.239248991 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.263391018 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.263467073 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.263518095 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.263569117 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.263777971 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.263792038 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.263803005 CET	49934	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.263808012 CET	443	49934	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.266809940 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.266840935 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.266995907 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.267174959 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.267187119 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.305421114 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.305533886 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.305596113 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.305780888 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.305804014 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.305820942 CET	49935	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.305829048 CET	443	49935	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.308598042 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.308634043 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.308706999 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.308885098 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.308900118 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.313697100 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.314152002 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.314172029 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.314594984 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.314599991 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.372440100 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.372595072 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.372679949 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.373565912 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.373586893 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.373600960 CET	49936	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.373606920 CET	443	49936	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.376383066 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.376411915 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.376594067 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.376775980 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.376791954 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.444948912 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.444977045 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.445039034 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.445040941 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.445112944 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.445291042 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.445313931 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.445327044 CET	49937	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.445332050 CET	443	49937	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.448385000 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.448440075 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.448508024 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.448674917 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.448694944 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.868668079 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.869146109 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.869177103 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.869842052 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:33.869848967 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:33.997683048 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.001777887 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.001849890 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.001921892 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.050637960 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.050888062 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.073390961 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.073416948 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.073970079 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.073977947 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.074388027 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.074421883 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.074434996 CET	49938	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.074446917 CET	443	49938	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.079485893 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.079524994 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.080199957 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.080204964 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.089543104 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.089586973 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.089658022 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.096498013 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.096513987 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.114597082 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.130908012 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.130924940 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.164840937 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.164855003 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.188685894 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.195069075 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.195108891 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.195797920 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.195811987 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.199522018 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.199768066 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.199826956 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.199841022 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.199883938 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.206022024 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.206096888 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.206237078 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.208597898 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.208623886 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.208678007 CET	49939	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.208686113 CET	443	49939	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.209151983 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.209184885 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.209220886 CET	49940	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.209233046 CET	443	49940	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.237826109 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.237910032 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.237991095 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.238601923 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.238636971 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.239720106 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.239757061 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.240052938 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.240180969 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.240194082 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.292120934 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.292382002 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.292443037 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.292757988 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.292773962 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.292785883 CET	49941	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.292792082 CET	443	49941	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.296684027 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.296736956 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.296844006 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.297024965 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.297039986 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.324287891 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.324439049 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.324484110 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.324512005 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.324559927 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.324784040 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.324784040 CET	49942	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.324810028 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.324815035 CET	443	49942	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.327649117 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.327682972 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.327810049 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.327955961 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.327966928 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.844340086 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.844836950 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.844856977 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.845303059 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.845309019 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.969600916 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.970140934 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.970177889 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.970637083 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.970643044 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.992022991 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.992604017 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.992626905 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:34.993052959 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:34.993060112 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.007900953 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.007997036 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.008088112 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.008177042 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.008189917 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.008202076 CET	49943	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.008207083 CET	443	49943	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.011048079 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.011080027 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.011138916 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.011271954 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.011285067 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.072269917 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.072839975 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.072856903 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.073421001 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.073436975 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.099649906 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.099751949 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.099814892 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.100528955 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.100554943 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.100565910 CET	49944	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.100572109 CET	443	49944	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.103631020 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.103669882 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.103766918 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.103935957 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.103951931 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.127895117 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.127932072 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.127995014 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.127995968 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.128073931 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.128360987 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.128360987 CET	49945	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.128379107 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.128387928 CET	443	49945	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.135221004 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.135257006 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.135334969 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.135543108 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.135556936 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.208132982 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.208153009 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.208190918 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.208221912 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.208273888 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.208458900 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.208458900 CET	49947	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.208471060 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.208481073 CET	443	49947	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.212563992 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.212609053 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.212690115 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.212929964 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.212943077 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.745836020 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.746613979 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.746634007 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.747260094 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.747266054 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.838128090 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.838685036 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.838706017 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.839134932 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.839139938 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.878356934 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.878642082 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.878700018 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.878737926 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.878756046 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.878767014 CET	49948	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.878772974 CET	443	49948	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.881680012 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.881722927 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.881879091 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.882046938 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.882069111 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.894953966 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.895395994 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.895414114 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.895854950 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.895860910 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.969515085 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.969597101 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.969741106 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.969898939 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.969923019 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.969933033 CET	49949	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.969938040 CET	443	49949	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.972311974 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.972748041 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.972786903 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.972795010 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.972807884 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.972877026 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.973069906 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.973076105 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:35.973262072 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:35.973268032 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.028379917 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.029536009 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.029598951 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.029656887 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.029675007 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.029686928 CET	49950	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.029692888 CET	443	49950	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.032542944 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.032574892 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.032870054 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.033040047 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.033050060 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.088325977 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.088829994 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.088865042 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.089368105 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.089375019 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.109235048 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.109312057 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.109420061 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.109422922 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.109477043 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.109699011 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.109699011 CET	49951	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.109719992 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.109730959 CET	443	49951	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.112452984 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.112500906 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.112765074 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.112972021 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.112987995 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.222178936 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.222347975 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.222431898 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.222572088 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.222592115 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.222604990 CET	49946	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.222609997 CET	443	49946	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.225348949 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.225439072 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.225552082 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.225735903 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.225758076 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.639738083 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.640254021 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.640288115 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.641011000 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.641019106 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.727472067 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.728207111 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.728236914 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.728657007 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.728663921 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.776355982 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.776443958 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.776500940 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.776710033 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.776734114 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.776746988 CET	49952	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.776753902 CET	443	49952	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.781358957 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.781393051 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.781675100 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.781816006 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.781826973 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.791083097 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.791488886 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.791510105 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.791929007 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.791935921 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.860330105 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.860426903 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.860474110 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.860481024 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.860521078 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.860701084 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.860718966 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.860730886 CET	49953	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.860737085 CET	443	49953	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.863583088 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.863627911 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.864032030 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.864032030 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.864068031 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.878374100 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.878885031 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.878901958 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.879350901 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.879357100 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.926811934 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.927702904 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.927771091 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.927850008 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.927866936 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.927880049 CET	49954	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.927887917 CET	443	49954	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.930872917 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.930902958 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.930954933 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.931109905 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.931123018 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.962966919 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.963438034 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.963459969 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:36.963892937 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:36.963900089 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.014281034 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.014451981 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.014498949 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.014540911 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.014610052 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.014647961 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.014667988 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.014678955 CET	49955	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.014684916 CET	443	49955	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.017549992 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.017606974 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.017673016 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.017842054 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.017862082 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.093508005 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.093817949 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.093888044 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.093945980 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.093966961 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.093997955 CET	49956	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.094006062 CET	443	49956	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.096973896 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.097007036 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.097107887 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.097333908 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.097338915 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.557818890 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.558320045 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.558340073 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.558783054 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.558789015 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.682152987 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.682615042 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.682637930 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.683069944 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.683077097 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.684732914 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.685125113 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.685169935 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.685674906 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.685688972 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.699800968 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.699867010 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.700088024 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.700875998 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.700898886 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.700911999 CET	49957	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.700917959 CET	443	49957	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.703985929 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.704047918 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.704121113 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.704279900 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.704296112 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.805406094 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.805896044 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.805948973 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.806360006 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.806372881 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.814349890 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.814376116 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.814423084 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.814434052 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.814474106 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.814649105 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.814649105 CET	49959	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.814670086 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.814678907 CET	443	49959	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.817373037 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.817399979 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.817728996 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.817728996 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.817764997 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.821547031 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.821608067 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.821660995 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.821757078 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.821780920 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.821796894 CET	49958	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.821804047 CET	443	49958	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.824243069 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.824281931 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.824338913 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.824461937 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.824475050 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.862548113 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.866308928 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.866328955 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.867057085 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.867067099 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.942450047 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.942783117 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.942845106 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.942925930 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.942958117 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.942975998 CET	49960	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.942982912 CET	443	49960	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.945837021 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.945878029 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:37.946110964 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.946266890 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:37.946275949 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.002422094 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.002517939 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.002593040 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.002697945 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.002713919 CET	49961	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.002717018 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.002724886 CET	443	49961	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.005620956 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.005664110 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.005723953 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.005887985 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.005901098 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.148832083 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:07:38.148859978 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:07:38.457019091 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.457510948 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.457566023 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.458058119 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.458065987 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.552856922 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.553313017 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.553344965 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.553863049 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.553879023 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.576668978 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.577126980 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.577143908 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.577585936 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.577590942 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.591932058 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.591989994 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.592051029 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.592722893 CET	49962	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.592746973 CET	443	49962	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.597701073 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.597738981 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.597923040 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.598095894 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.598119974 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.683293104 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.683741093 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.683850050 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.684096098 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.684096098 CET	49964	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.684135914 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.684148073 CET	443	49964	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.691056967 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.691096067 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.691258907 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.691699982 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.691714048 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.706059933 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.707334042 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.707355022 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.708370924 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.708378077 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.711210012 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.711366892 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.711427927 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.711589098 CET	49963	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.711600065 CET	443	49963	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.718132019 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.718178034 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.718318939 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.719347000 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.719362974 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.742875099 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.743664980 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.743686914 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.744873047 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.744880915 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.843673944 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.843782902 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.843939066 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.844494104 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.844494104 CET	49965	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.844511032 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.844520092 CET	443	49965	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.855900049 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.855932951 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.856018066 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.856265068 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.856276989 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.872428894 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.872602940 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.872736931 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.872912884 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.872912884 CET	49966	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.872935057 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.872946978 CET	443	49966	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.876681089 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.876729012 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:38.876919031 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.896076918 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:38.896097898 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.355945110 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.357336044 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.357367992 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.357903004 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.357916117 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.424674988 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.425195932 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.425230026 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.425654888 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.425659895 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.450089931 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.450987101 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.451045036 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.451474905 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.451483011 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.490133047 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.490262985 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.490315914 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.490432978 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.490432978 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.490518093 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.490518093 CET	49967	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.490546942 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.490557909 CET	443	49967	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.493179083 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.493205070 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.493426085 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.493588924 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.493601084 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.555289030 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.555361032 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.555428982 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.555604935 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.555624008 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.555639982 CET	49968	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.555646896 CET	443	49968	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.558290005 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.558330059 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.558407068 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.558562040 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.558578014 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.582245111 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.582304955 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.582355976 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.582381010 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.582436085 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.582864046 CET	49969	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.582887888 CET	443	49969	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.584316015 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.584880114 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.584919930 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.585628986 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.585643053 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.586112022 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.586147070 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.586262941 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.586541891 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.586560965 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.631664038 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.632158041 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.632203102 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.632616997 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.632627010 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.657696009 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:39.657779932 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:39.657919884 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:39.658561945 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:39.658603907 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:39.713790894 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.713892937 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.713949919 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.714085102 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.714102983 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.714131117 CET	49970	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.714138031 CET	443	49970	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.717957973 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.718007088 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.718086004 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.718317986 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.718331099 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.760740042 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.761223078 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.761287928 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.761303902 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.761394024 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.761660099 CET	49971	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.761679888 CET	443	49971	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.765204906 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.765243053 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:39.765384912 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.765557051 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:39.765572071 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.236994982 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.240639925 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.240658998 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.241405010 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.241416931 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.302611113 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.303145885 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.303168058 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.303597927 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.303605080 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.309757948 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.310121059 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.310137033 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.310595989 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.310600996 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.369092941 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.369184017 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.369329929 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.369364023 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.369379997 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.369393110 CET	49972	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.369399071 CET	443	49972	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.372685909 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.372705936 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.372766018 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.372908115 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.372920990 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.436187029 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.436258078 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.436307907 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.436553955 CET	49973	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.436564922 CET	443	49973	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439033985 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439133883 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439271927 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439547062 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439548969 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439563036 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439579010 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439579010 CET	49974	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439585924 CET	443	49974	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.439673901 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439799070 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.439815044 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.441972971 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.441998959 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.442061901 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.442167997 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.442182064 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.446090937 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.446470022 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.446484089 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.446909904 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.446914911 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.500572920 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.501077890 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.501101971 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.501523018 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.501528978 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.575243950 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.575455904 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.575500965 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.575556993 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.575680017 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.575697899 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.575711966 CET	49976	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.575717926 CET	443	49976	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.579494953 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.579533100 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.579787970 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.579979897 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.579994917 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.629551888 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.629642010 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.629796028 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.629885912 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.629905939 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.629919052 CET	49977	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.629926920 CET	443	49977	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.632908106 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.632935047 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.633003950 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.633189917 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:40.633202076 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:40.791821957 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:40.791898966 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:40.794133902 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:40.794142962 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:40.794471979 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:40.796536922 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:40.796735048 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:40.796742916 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:40.796897888 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:40.839345932 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:41.051960945 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:41.052473068 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:41.052501917 CET	443	49975	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:41.052608967 CET	49975	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:41.109215975 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.109803915 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.109823942 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.110328913 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.110335112 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.163223982 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.163702011 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.163736105 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.164154053 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.164163113 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.173233986 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.173688889 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.173707008 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.174227953 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.174232006 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.241313934 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.241419077 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.241476059 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.241655111 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.241679907 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.241691113 CET	49978	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.241698027 CET	443	49978	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.244648933 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.244692087 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.244757891 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.244908094 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.244920969 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.303241968 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.303308964 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.303374052 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.303581953 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.303595066 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.303605080 CET	49980	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.303611994 CET	443	49980	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.306480885 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.306504965 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.306567907 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.306724072 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.306735992 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.322453022 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.322474957 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.322521925 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.322527885 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.322568893 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.322670937 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.322690010 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.322700977 CET	49979	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.322706938 CET	443	49979	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.326638937 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.326666117 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.326730967 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.326867104 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.326879978 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.337991953 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.338366032 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.338382006 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.338793039 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.338797092 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.387465000 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.388767004 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.388792038 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.389235020 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.389240980 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.474786997 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.474814892 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.474864006 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.474879980 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.474910021 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.475044966 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.475137949 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.475152969 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.475163937 CET	49981	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.475167990 CET	443	49981	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.478005886 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.478033066 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.478099108 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.478267908 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.478280067 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.520971060 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.521027088 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.521100998 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.521111965 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.521294117 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.521301031 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.521308899 CET	49982	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.521377087 CET	443	49982	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.523683071 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.523735046 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.523880005 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.524060011 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.524071932 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.975661039 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.976047039 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.976084948 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:41.976674080 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:41.976680040 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.061983109 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.062767982 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.062787056 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.063615084 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.063618898 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.087167025 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.087759972 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.087798119 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.088829994 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.088836908 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.108083010 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.108105898 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.108160019 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.108187914 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.108231068 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.108508110 CET	49984	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.108525991 CET	443	49984	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.114466906 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.114526033 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.114598989 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.115142107 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.115159035 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.199331045 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.199353933 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.199413061 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.199413061 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.199457884 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.199973106 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.199985981 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.200006962 CET	49985	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.200011969 CET	443	49985	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.207639933 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.207686901 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.207947969 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.208266973 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.208282948 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.221252918 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.221756935 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.221774101 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.222913027 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.222918034 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.223373890 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.223490000 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.223556042 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.223737001 CET	49986	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.223763943 CET	443	49986	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.231164932 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.231200933 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.231297970 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.234424114 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.234438896 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.265963078 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.268290997 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.268312931 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.269551039 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.269555092 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.353354931 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.353446960 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.353538036 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.353864908 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.353877068 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.353902102 CET	49987	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.353907108 CET	443	49987	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.359847069 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.359889984 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.359956026 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.360214949 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.360229015 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.399985075 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.400129080 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.400232077 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.400268078 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.400289059 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.400300980 CET	49988	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.400306940 CET	443	49988	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.403162956 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.403196096 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.403294086 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.403414011 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.403428078 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.867882967 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.883316994 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.883342028 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.883909941 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.883914948 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.927185059 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.927630901 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.927670956 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.928054094 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.928067923 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.974344015 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.974761009 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.974796057 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:42.975187063 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:42.975198030 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.014827967 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.014904022 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.015016079 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.015254021 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.015283108 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.015300035 CET	49989	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.015309095 CET	443	49989	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.018172026 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.018205881 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.018357992 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.018522024 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.018536091 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.056848049 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.056870937 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.056932926 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.056941032 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.056974888 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.057109118 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.057132959 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.057143927 CET	49990	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.057149887 CET	443	49990	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.060863018 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.060895920 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.061175108 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.061783075 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.061796904 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.109683037 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.109702110 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.109755993 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.109769106 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.109802961 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.109951973 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.109970093 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.110007048 CET	49991	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.110012054 CET	443	49991	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.111005068 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.111511946 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.111531019 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.111882925 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.111888885 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.112230062 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.112267017 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.112322092 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.112418890 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.112437963 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.136996984 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.137923002 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.137938976 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.138288021 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.138293028 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269077063 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269149065 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269243956 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.269257069 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269303083 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269397974 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.269555092 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.269555092 CET	49993	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.269568920 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.269579887 CET	443	49993	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.272129059 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.272161961 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.272391081 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.272535086 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.272552967 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.359994888 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.360018015 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.360033035 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.360114098 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.360131025 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.360228062 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.367619991 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.367691040 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.367691040 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.367762089 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.367783070 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.367798090 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.367846012 CET	49992	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.367851973 CET	443	49992	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.370420933 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.370467901 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.370539904 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.370948076 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.370960951 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.761173964 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.761640072 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.761660099 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.762281895 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.762288094 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.780085087 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.780805111 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.780821085 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.781096935 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.781101942 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.840617895 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.841061115 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.841125965 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.841624975 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.841645002 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.911364079 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.911386967 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.911441088 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.911473989 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.911573887 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.911751986 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.911751986 CET	49995	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.911771059 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.911781073 CET	443	49995	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.914501905 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.914546967 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.914616108 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.914827108 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.914843082 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.971671104 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.971689939 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.971771955 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.971806049 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.971904993 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.971952915 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.973213911 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.973231077 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.973242044 CET	49996	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.973247051 CET	443	49996	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.975733042 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.975769043 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:43.975826025 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.976003885 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:43.976016998 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.006825924 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.006848097 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.006865978 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.006934881 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.006954908 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.007005930 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.016300917 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.016351938 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.016370058 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.016393900 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.016415119 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.016591072 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.016591072 CET	49994	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.016608953 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.016624928 CET	443	49994	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.017124891 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.017648935 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.017685890 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.018057108 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.018064022 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.019443989 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.019467115 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.019782066 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.019782066 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.019804955 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.123321056 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.123694897 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.123733997 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.124099016 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.124104023 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.151134968 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.151853085 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.151927948 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.151963949 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.151963949 CET	49997	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.151981115 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.151988983 CET	443	49997	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.154664993 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.154697895 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.154759884 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.154923916 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.154937983 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.257934093 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.258568048 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.258619070 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.258650064 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.258668900 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.258681059 CET	49998	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.258686066 CET	443	49998	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.261032104 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.261121035 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.261266947 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.261409044 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.261420012 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.646481037 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.647126913 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.647156954 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.647655964 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.647661924 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.706012964 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.706492901 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.706511021 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.706928968 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.706933975 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.755738020 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.756217957 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.756243944 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.756607056 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.756613016 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.779011965 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.782392979 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.782459974 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.782543898 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.782562017 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.782576084 CET	49999	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.782582045 CET	443	49999	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.785093069 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.785123110 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.785259962 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.785408020 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.785422087 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.837047100 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.837095976 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.837142944 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.837338924 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.837348938 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.837380886 CET	50000	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.837387085 CET	443	50000	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.839740038 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.839792013 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.839991093 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.840135098 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.840150118 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.910758972 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.911147118 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.911159039 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.911508083 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.911513090 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.935223103 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.935594082 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.935642004 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.935647011 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.935700893 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.935892105 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.935910940 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:44.935940027 CET	50001	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:44.935947895 CET	443	50001	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.031791925 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.032223940 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.032241106 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.032758951 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.032763958 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.046608925 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.049635887 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.049691916 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.049734116 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.049746990 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.049757957 CET	50002	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.049762964 CET	443	50002	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.165910006 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.165977001 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.166126966 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.166234016 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.166256905 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.166270018 CET	50003	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.166275024 CET	443	50003	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.555270910 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.556066990 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.556096077 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.558213949 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.558218956 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.566725016 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.567111969 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.567183971 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.570218086 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.570240021 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.688426971 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.688527107 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.688725948 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.688725948 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.688884020 CET	50004	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.688899994 CET	443	50004	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.696336985 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.696856976 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:45.697002888 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.697002888 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.697339058 CET	50005	443	192.168.2.6	13.107.246.45
Oct 30, 2024 00:07:45.697359085 CET	443	50005	13.107.246.45	192.168.2.6
Oct 30, 2024 00:07:48.684792995 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:48.684869051 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:48.684932947 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:48.686042070 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:48.686053991 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:49.808458090 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:49.808569908 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:49.817117929 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:49.817145109 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:49.817459106 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:49.840758085 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:49.840758085 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:49.840799093 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:49.841006994 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:49.887330055 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:50.092075109 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:50.092653036 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:50.092683077 CET	443	50006	40.113.110.67	192.168.2.6
Oct 30, 2024 00:07:50.092705965 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:50.092842102 CET	50006	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:07:53.155787945 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:07:53.155925035 CET	443	49717	142.250.181.238	192.168.2.6
Oct 30, 2024 00:07:53.155983925 CET	49717	443	192.168.2.6	142.250.181.238
Oct 30, 2024 00:07:55.169316053 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:55.169368982 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:55.169431925 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:55.169676065 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:55.169687986 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:56.038459063 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:56.042644978 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:56.042670965 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:56.043025970 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:56.044749022 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:56.044810057 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:07:56.090508938 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:07:59.229446888 CET	49830	443	192.168.2.6	172.217.16.193
Oct 30, 2024 00:07:59.229479074 CET	443	49830	172.217.16.193	192.168.2.6
Oct 30, 2024 00:08:06.033627033 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:08:06.033694029 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:08:06.033837080 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:08:07.154546976 CET	50008	443	192.168.2.6	142.250.185.100
Oct 30, 2024 00:08:07.154572964 CET	443	50008	142.250.185.100	192.168.2.6
Oct 30, 2024 00:08:07.383254051 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:07.383297920 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:07.383408070 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:07.383996964 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:07.384015083 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.497529030 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.497663975 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.501358032 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.501374960 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.501599073 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.502826929 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.502945900 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.502947092 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.502952099 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.547321081 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.752567053 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.753025055 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.753025055 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.753041983 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.753223896 CET	443	50010	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:08.753298044 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:08.753298044 CET	50010	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:13.536921978 CET	50011	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:13.536959887 CET	443	50011	40.113.110.67	192.168.2.6
Oct 30, 2024 00:08:13.537297964 CET	50011	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:13.537837982 CET	50011	443	192.168.2.6	40.113.110.67
Oct 30, 2024 00:08:13.537849903 CET	443	50011	40.113.110.67	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 00:06:50.448062897 CET	53	54744	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:50.448584080 CET	53	61288	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:51.675656080 CET	53	55581	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:52.234067917 CET	62743	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:52.234221935 CET	50822	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:52.241285086 CET	53	62743	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:52.241698980 CET	53	50822	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:53.642404079 CET	58882	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:53.642908096 CET	57697	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:53.651421070 CET	53	58882	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:53.652127028 CET	53	57697	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:55.119882107 CET	58452	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:55.120121956 CET	64547	53	192.168.2.6	1.1.1.1
Oct 30, 2024 00:06:55.127851963 CET	53	64547	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:55.127890110 CET	53	58452	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:55.826144934 CET	53	56722	1.1.1.1	192.168.2.6
Oct 30, 2024 00:06:57.376436949 CET	53	64035	1.1.1.1	192.168.2.6
Oct 30, 2024 00:07:08.896111965 CET	53	57225	1.1.1.1	192.168.2.6
Oct 30, 2024 00:07:27.975503922 CET	53	56245	1.1.1.1	192.168.2.6
Oct 30, 2024 00:07:50.086424112 CET	53	50332	1.1.1.1	192.168.2.6
Oct 30, 2024 00:07:51.076514006 CET	53	51633	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 00:06:52.234067917 CET	192.168.2.6	1.1.1.1	0x9654	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:06:52.234221935 CET	192.168.2.6	1.1.1.1	0xc53	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 30, 2024 00:06:53.642404079 CET	192.168.2.6	1.1.1.1	0x417f	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:06:53.642908096 CET	192.168.2.6	1.1.1.1	0xc614	Standard query (0)	drive.usercontent.google.com	65	IN (0x0001)	false
Oct 30, 2024 00:06:55.119882107 CET	192.168.2.6	1.1.1.1	0x83e2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:06:55.120121956 CET	192.168.2.6	1.1.1.1	0x761c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 00:06:52.241285086 CET	1.1.1.1	192.168.2.6	0x9654	No error (0)	docs.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:06:53.651421070 CET	1.1.1.1	192.168.2.6	0x417f	No error (0)	drive.usercontent.google.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:06:55.127851963 CET	1.1.1.1	192.168.2.6	0x761c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 00:06:55.127890110 CET	1.1.1.1	192.168.2.6	0x83e2	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:03.064296007 CET	1.1.1.1	192.168.2.6	0x767f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 00:07:03.064296007 CET	1.1.1.1	192.168.2.6	0x767f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:05.302015066 CET	1.1.1.1	192.168.2.6	0x78b1	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:05.302015066 CET	1.1.1.1	192.168.2.6	0x78b1	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:24.114762068 CET	1.1.1.1	192.168.2.6	0xf22b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:07:24.114762068 CET	1.1.1.1	192.168.2.6	0xf22b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:04.640049934 CET	1.1.1.1	192.168.2.6	0xa30a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 00:08:04.640049934 CET	1.1.1.1	192.168.2.6	0xa30a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49708	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:40 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 64 41 2b 2f 6a 58 58 6b 6b 6b 47 38 32 4e 6f 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 34 38 35 30 37 37 39 30 65 33 31 31 34 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: dA+/jXXkkkG82Nou.1Context: 4848507790e31144
2024-10-29 23:06:40 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:06:40 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 64 41 2b 2f 6a 58 58 6b 6b 6b 47 38 32 4e 6f 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 34 38 35 30 37 37 39 30 65 33 31 31 34 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: dA+/jXXkkkG82Nou.2Context: 4848507790e31144<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:06:40 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 64 41 2b 2f 6a 58 58 6b 6b 6b 47 38 32 4e 6f 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 34 38 35 30 37 37 39 30 65 33 31 31 34 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: dA+/jXXkkkG82Nou.3Context: 4848507790e31144
2024-10-29 23:06:40 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:06:40 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 5a 76 69 34 34 6a 62 41 30 4f 7a 59 46 52 65 37 58 53 4d 7a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: fZvi44jbA0OzYFRe7XSMzQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49709	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:49 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 6c 4e 65 4b 77 59 63 74 45 6d 37 71 79 57 78 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 39 61 32 38 61 64 34 36 31 64 30 39 34 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: flNeKwYctEm7qyWx.1Context: 809a28ad461d0940
2024-10-29 23:06:49 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:06:49 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 6c 4e 65 4b 77 59 63 74 45 6d 37 71 79 57 78 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 39 61 32 38 61 64 34 36 31 64 30 39 34 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: flNeKwYctEm7qyWx.2Context: 809a28ad461d0940<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:06:49 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 66 6c 4e 65 4b 77 59 63 74 45 6d 37 71 79 57 78 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 39 61 32 38 61 64 34 36 31 64 30 39 34 30 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: flNeKwYctEm7qyWx.3Context: 809a28ad461d0940
2024-10-29 23:06:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:06:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 4f 69 2b 57 66 63 59 53 45 61 51 78 78 61 56 68 48 32 77 52 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8Oi+WfcYSEaQxxaVhH2wRg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49713	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 67 74 76 46 66 73 75 2f 6b 32 46 52 52 6a 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 34 65 66 62 65 35 32 35 30 37 36 30 37 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: wgtvFfsu/k2FRRjg.1Context: c14efbe52507607a
2024-10-29 23:06:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:06:51 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 67 74 76 46 66 73 75 2f 6b 32 46 52 52 6a 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 34 65 66 62 65 35 32 35 30 37 36 30 37 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: wgtvFfsu/k2FRRjg.2Context: c14efbe52507607a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:06:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 67 74 76 46 66 73 75 2f 6b 32 46 52 52 6a 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 34 65 66 62 65 35 32 35 30 37 36 30 37 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: wgtvFfsu/k2FRRjg.3Context: c14efbe52507607a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-29 23:06:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:06:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 68 53 64 6b 47 6f 41 78 55 4f 65 42 53 46 48 77 35 4c 4f 4f 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: LhSdkGoAxUOeBSFHw5LOOw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49716	142.250.181.238	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:53 UTC	838	OUT	GET /uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 23:06:53 UTC	1626	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Oct 2024 23:06:53 GMT Location: https://drive.usercontent.google.com/download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-qdPONjZyo1vKKvNKMXxYQg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49720	172.217.16.193	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:54 UTC	857	OUT	GET /download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download HTTP/1.1 Host: drive.usercontent.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 23:06:55 UTC	2270	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: sandbox allow-scripts allow-forms allow-downloads Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-alft9QuaD168sGqd5YUGkg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Oct 2024 23:06:55 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/DriveUntrustedContentHttp/web-reports?context=eJzjMtDikmLw05BicEqfwRoCxKt_nmNdD8S7rM6zHgDiPZuANBD_kbnEyiB7iVWIh6P_autONoEL79YcZVRSTcovjE8pyixLzSgpKUgsyCxOLSpLLYo3MjAyMTQwNNczMIovMAAA9wcmyg" Content-Length: 2469 X-GUploader-UploadID: AHmUCY23SylCKyG1k3BIzkcJ1PCF0psp2evS5II5I5SDYiUyopx_A3o-sGDhROmdc2Brz_rlAIieM_Olaw Server: UploadServer Set-Cookie: NID=518=Ow2PmK8h_nD90-G5J1k6VD-Yfgjw_A81PRGsqBBI3EKab0UDifH7ksIdqkSHtR_I8S5d7jyxWkno7aVkwycrSJKtMohw5x74YWaCd4l9UxJsszXDC4s0aFrmg0j2b7CJsvYfMKWL0Kx2ubQnK3LM-ab45LE0OdDjFAuzzC390FI20RB13UY; expires=Wed, 30-Apr-2025 23:06:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 23:06:55 UTC	2270	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 44 72 69 76 65 20 2d 20 56 69 72 75 73 20 73 63 61 6e 20 77 61 72 6e 69 6e 67 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 46 75 6f 5f 57 47 47 36 68 57 48 4d 63 56 4e 67 58 6e 7a 79 67 41 22 3e 2e 67 6f 6f 67 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 23 31 35 63 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 Data Ascii: <!DOCTYPE html><html><head><title>Google Drive - Virus scan warning</title><meta http-equiv="content-type" content="text/html; charset=utf-8"/><style nonce="Fuo_WGG6hWHMcVNgXnzygA">.goog-link-button{position:relative;color:#15c;text-decoration:underline;c
2024-10-29 23:06:55 UTC	199	IN	Data Raw: 65 6e 22 20 6e 61 6d 65 3d 22 63 6f 6e 66 69 72 6d 22 20 76 61 6c 75 65 3d 22 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 75 69 64 22 20 76 61 6c 75 65 3d 22 62 64 64 36 35 64 62 33 2d 31 65 66 38 2d 34 38 35 31 2d 61 66 31 32 2d 30 35 34 65 31 38 31 30 31 38 33 65 22 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 63 2d 66 6f 6f 74 65 72 22 3e 3c 68 72 20 63 6c 61 73 73 3d 22 75 63 2d 66 6f 6f 74 65 72 2d 64 69 76 69 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: en" name="confirm" value="t"><input type="hidden" name="uuid" value="bdd65db3-1ef8-4851-af12-054e1810183e"></form></div></div><div class="uc-footer"><hr class="uc-footer-divider"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:55 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230655Z-r197bdfb6b4wmcgqdschtyp7yg000000072000000000q3y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:55 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-29 23:06:55 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 23:06:56 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=49672 Date: Tue, 29 Oct 2024 23:06:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:56 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230656Z-16849878b78z2wx67pvzz63kdg00000005rg00000000ss6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:06:56 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230656Z-16849878b78j7llf5vkyvvcehs000000088000000000m00z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:56 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230656Z-15b8d89586flspj6y6m5fk442w0000000d1000000000cknb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:56 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:56 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230656Z-16849878b78sx229w7g7at4nkg00000005ag00000000w2kw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:56 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:56 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230656Z-16849878b7828dsgct3vrzta7000000005gg00000000uxet x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:56 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230657Z-16849878b78fhxrnedubv5byks00000005kg000000005k1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:57 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49730	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 23:06:57 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=49725 Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 23:06:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:57 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230657Z-16849878b786lft2mu9uftf3y400000008gg000000004dx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:57 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230657Z-15b8d89586f989rkwt13xern5400000002d000000000g4f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230657Z-16849878b78p8hrf1se7fucxk8000000080g00000000nkcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:57 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:57 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230657Z-16849878b7828dsgct3vrzta7000000005h000000000unyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:58 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230658Z-16849878b78smng4k6nq15r6s400000008mg00000000wr9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:06:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230658Z-15b8d89586fst84kttks1s2css00000000x0000000006ndt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 962f3e82-b01e-0070-52cb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230658Z-r197bdfb6b4wmcgqdschtyp7yg000000073000000000kerg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:58 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230658Z-17c5cb586f6b6kj91vqtm6kxaw00000005u000000000hkna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230658Z-16849878b78wv88bk51myq5vxc00000007d000000000r4tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:59 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230659Z-r197bdfb6b46krmwag4tzr9x7c0000000730000000005t8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230659Z-16849878b78j5kdg3dndgqw0vg00000008tg00000000x8yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:59 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 389e5e1f-601e-000d-2325-282618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230659Z-17c5cb586f66g7mvgrudxte954000000021g00000000nhps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:06:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:06:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:06:59 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 860a7776-a01e-00ab-0afb-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230659Z-r197bdfb6b4wmcgqdschtyp7yg00000007800000000045sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:06:59 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:00 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230700Z-16849878b786lft2mu9uftf3y400000008bg00000000tymv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:00 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230700Z-16849878b7898p5f6vryaqvp58000000080000000000gqxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:00 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230700Z-16849878b78km6fmmkbenhx76n00000006h000000000e8gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7d21e20b-801e-0015-30df-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230700Z-17c5cb586f6hn8cl90dxzu28kw00000007bg000000003ume x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: ebbbec6e-b01e-0021-1c83-29cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230700Z-17c5cb586f6wmhkn5q6fu8c5ss00000006p00000000045vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49749	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 64 37 59 4b 50 4a 6f 39 62 6b 53 53 63 45 62 68 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 62 64 30 62 38 30 35 37 39 30 64 35 62 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: d7YKPJo9bkSScEbh.1Context: 4ebd0b805790d5b6
2024-10-29 23:07:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:07:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 64 37 59 4b 50 4a 6f 39 62 6b 53 53 63 45 62 68 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 62 64 30 62 38 30 35 37 39 30 64 35 62 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: d7YKPJo9bkSScEbh.2Context: 4ebd0b805790d5b6<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:07:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 64 37 59 4b 50 4a 6f 39 62 6b 53 53 63 45 62 68 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 62 64 30 62 38 30 35 37 39 30 64 35 62 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: d7YKPJo9bkSScEbh.3Context: 4ebd0b805790d5b6<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-29 23:07:00 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:07:00 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 6d 47 44 4b 67 34 71 74 30 32 52 31 46 42 68 34 6c 2f 2b 46 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: smGDKg4qt02R1FBh4l/+Fg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49748	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 33 47 30 46 68 79 4e 6f 30 71 79 4a 6e 35 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 33 30 66 38 30 31 64 66 33 62 31 32 61 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: G3G0FhyNo0qyJn5j.1Context: 8530f801df3b12ad
2024-10-29 23:07:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:07:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 47 33 47 30 46 68 79 4e 6f 30 71 79 4a 6e 35 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 33 30 66 38 30 31 64 66 33 62 31 32 61 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: G3G0FhyNo0qyJn5j.2Context: 8530f801df3b12ad<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:07:00 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 47 33 47 30 46 68 79 4e 6f 30 71 79 4a 6e 35 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 33 30 66 38 30 31 64 66 33 62 31 32 61 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: G3G0FhyNo0qyJn5j.3Context: 8530f801df3b12ad
2024-10-29 23:07:00 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:07:00 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 69 34 42 7a 36 4d 4f 6c 45 71 73 4f 57 46 4f 34 64 30 6a 53 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: fi4Bz6MOlEqsOWFO4d0jSw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:01 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:01 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: a47c2137-201e-0051-01e4-257340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230701Z-15b8d89586f42m673h1quuee4s0000000b9g000000008rah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:01 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230701Z-16849878b786fl7gm2qg4r5y7000000007fg00000000fafd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230701Z-17c5cb586f6vcw6vtg5eymp4u8000000059000000000bca3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230701Z-15b8d89586fpccrmgpemqdqe58000000024g000000003g10 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230701Z-16849878b78qf2gleqhwczd21s00000007bg00000000k16q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230702Z-16849878b786fl7gm2qg4r5y7000000007eg00000000fncg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230702Z-r197bdfb6b4bs5qf58wn14wgm0000000066g00000000g7q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230702Z-16849878b78bjkl8dpep89pbgg00000005xg000000009nek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230702Z-15b8d89586fbmg6qpd9yf8zhm0000000023000000000bfh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230702Z-16849878b78g2m84h2v9sta290000000065g0000000055kc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:03 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230703Z-16849878b78zqkvcwgr6h55x9n00000006gg0000000119q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:03 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: b906435d-801e-008c-78a0-297130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230703Z-17c5cb586f6hn8cl90dxzu28kw00000007b0000000004mmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7ae13fc9-101e-005a-3933-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230703Z-r197bdfb6b46krmwag4tzr9x7c000000070g00000000c4mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230703Z-15b8d89586fxdh48ft0acdbg4400000000yg00000000bd5e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230703Z-r197bdfb6b4bs5qf58wn14wgm000000006c00000000026am x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:03 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-16849878b786lft2mu9uftf3y400000008bg00000000tyz4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:04 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b14e1d55-401e-0078-709c-274d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-17c5cb586f6z6tw6g7cmdv30m800000008kg00000000cgd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-16849878b78xblwksrnkakc08w00000006f000000000b3ex x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-15b8d89586flspj6y6m5fk442w0000000d0000000000fymn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 447b9191-101e-0017-54f0-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-17c5cb586f6r59nt869u8w8xt80000000680000000004d1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:04 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230704Z-16849878b78qfbkc5yywmsbg0c00000006wg00000000bdrd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-16849878b78qg9mlz11wgn0wcc00000006pg00000000vu3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 2a6eba0c-f01e-001f-0a87-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-17c5cb586f6sqz6f73fsew1zd800000000tg00000000p06u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:04 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d0d63b60-601e-0050-7d63-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-17c5cb586f626sn8grcgm1gf8000000005ng00000000cr58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: efaca471-901e-002a-6713-287a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-17c5cb586f6r59nt869u8w8xt800000006600000000099mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3efaf52f-501e-008c-0d35-29cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-15b8d89586f989rkwt13xern5400000002mg000000000bgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-17c5cb586f69w69mgazyf263an000000069000000000mxf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230705Z-17c5cb586f67hfgj2durhqcxk80000000660000000001n9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-r197bdfb6b4bs5qf58wn14wgm000000006bg000000003f8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:05 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-16849878b78j5kdg3dndgqw0vg00000008w000000000gw48 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cbc40ba7-201e-0003-72af-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-17c5cb586f6z6tw6g7cmdv30m800000008kg00000000cgha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-16849878b782d4lwcu6h6gmxnw00000006sg00000000w35c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-16849878b78qwx7pmw9x5fub1c000000057g00000000xbur x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-16849878b78qf2gleqhwczd21s00000007bg00000000k1n5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230706Z-16849878b78q9m8bqvwuva4svc00000005mg00000000xc62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230707Z-17c5cb586f672xmrz843mf85fn000000062g000000005waz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3281a84b-401e-0029-700c-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230707Z-r197bdfb6b47gqdjvmbpfaf2d000000002b000000000hf72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230707Z-r197bdfb6b4hsj5bywyqk9r2xw00000008rg000000004dkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4814b401-401e-005b-1e73-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230707Z-17c5cb586f6g6g2sa7kg5c0gg000000002h00000000066ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230707Z-16849878b78j5kdg3dndgqw0vg00000008u000000000wrye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230708Z-16849878b78wv88bk51myq5vxc00000007e000000000khm8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230708Z-16849878b785jrf8dn0d2rczaw00000008dg000000004nym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230708Z-16849878b78km6fmmkbenhx76n00000006fg00000000ph4n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cce6b4d6-601e-000d-171c-292618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230708Z-r197bdfb6b4d9xksru4x6qbqr000000007b0000000006tk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230708Z-16849878b78fssff8btnns3b1400000007f000000000e3p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 6c7ab4fb-501e-0078-78bf-2706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230709Z-17c5cb586f65j4snvy39m6qus400000002cg00000000p3gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230709Z-16849878b782d4lwcu6h6gmxnw00000006y00000000054xs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230709Z-15b8d89586f42m673h1quuee4s0000000bbg0000000044vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230709Z-15b8d89586ffsjj9qb0gmb1stn0000000beg0000000051kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:10 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230710Z-15b8d89586fzcfbd8we4bvhqds000000027g000000001p2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230710Z-16849878b78qf2gleqhwczd21s000000078g00000000y1rc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230710Z-16849878b78x6gn56mgecg60qc00000008z000000000kcag x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:10 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230710Z-16849878b78km6fmmkbenhx76n00000006d0000000010uh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:10 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230710Z-16849878b78hh85qc40uyr8sc800000007fg00000000c5qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230711Z-16849878b78smng4k6nq15r6s400000008kg0000000110an x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230711Z-17c5cb586f69w69mgazyf263an00000006a000000000guyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230711Z-16849878b78fssff8btnns3b1400000007c000000000vxbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230711Z-15b8d89586fdmfsg1u7xrpfws00000000bb000000000g631 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230711Z-16849878b78x6gn56mgecg60qc00000009300000000024dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 353927da-e01e-0003-452b-290fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-r197bdfb6b48v72xb403uy6hns00000007tg00000000gggn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-16849878b78j7llf5vkyvvcehs000000086000000000ut4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 394c271c-f01e-0020-7bb8-29956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-r197bdfb6b4skzzvqpzzd3xetg00000006g000000000muet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d8669f86-801e-0083-53a9-29f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-17c5cb586f65j4snvy39m6qus400000002cg00000000p3p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 980a0530-101e-00a2-7d83-299f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-r197bdfb6b48pcqqxhenwd2uz800000007z000000000n283 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:12 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230712Z-16849878b78xblwksrnkakc08w00000006ag00000000xe09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: ebb042ec-b01e-0021-7980-29cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230713Z-17c5cb586f6wnfhvhw6gvetfh400000006m000000000g62x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230713Z-16849878b78g2m84h2v9sta290000000062g00000000hzcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:13 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230713Z-16849878b782d4lwcu6h6gmxnw00000006w000000000e39g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230713Z-16849878b7898p5f6vryaqvp5800000007y000000000w8ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:13 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230713Z-16849878b7867ttgfbpnfxt44s0000000730000000009ch9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230714Z-15b8d89586fzcfbd8we4bvhqds000000027g000000001p8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:14 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230714Z-16849878b78fkwcjkpn19c5dsn000000064000000000trf4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49829	172.217.16.193	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	1357	OUT	GET /download?id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N&export=download&confirm=t&uuid=bdd65db3-1ef8-4851-af12-054e1810183e HTTP/1.1 Host: drive.usercontent.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ow2PmK8h_nD90-G5J1k6VD-Yfgjw_A81PRGsqBBI3EKab0UDifH7ksIdqkSHtR_I8S5d7jyxWkno7aVkwycrSJKtMohw5x74YWaCd4l9UxJsszXDC4s0aFrmg0j2b7CJsvYfMKWL0Kx2ubQnK3LM-ab45LE0OdDjFAuzzC390FI20RB13UY
2024-10-29 23:07:16 UTC	4962	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Security-Policy: sandbox Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' X-Content-Security-Policy: sandbox Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Resource-Policy: same-site X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="DETALLE DE ACTUACIN JUDICIAL RAD.05000312110120220006501.zip" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Pctx, X-Client-Version, x-debug-settings-metadata, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogA [TRUNCATED] Access-Control-Allow-Methods: GET,HEAD,OPTIONS Accept-Ranges: bytes Content-Length: 7099 Last-Modified: Fri, 25 Oct 2024 13:30:22 GMT X-GUploader-UploadID: AHmUCY06apuJ1zOXK9mv2ZN4rzMvH_UM8Q5nzpofNQJQ0Vfty0SSZegatGkbE2XShmSQ4XYbJeFKYOU9zg Date: Tue, 29 Oct 2024 23:07:16 GMT Expires: Tue, 29 Oct 2024 23:07:16 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=2j081g== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 23:07:16 UTC	4962	IN	Data Raw: 50 4b 03 04 14 00 09 00 08 00 d6 40 59 59 78 c1 f8 ed 1d 1a 00 00 79 4b 03 00 3d 00 47 00 44 45 54 41 4c 4c 45 20 44 45 20 41 43 54 55 41 43 49 e0 4e 20 4a 55 44 49 43 49 41 4c 20 52 41 44 2e 30 35 30 30 30 33 31 32 31 31 30 31 32 30 32 32 30 30 30 36 35 30 31 2e 62 61 74 75 70 43 00 01 06 ad 3a 6d 44 45 54 41 4c 4c 45 20 44 45 20 41 43 54 55 41 43 49 c3 93 4e 20 4a 55 44 49 43 49 41 4c 20 52 41 44 2e 30 35 30 30 30 33 31 32 31 31 30 31 32 30 32 32 30 30 30 36 35 30 31 2e 62 61 74 62 7c c9 67 30 ac 90 64 6e 5b 12 76 7b 58 51 9a 01 75 95 c6 88 1d b6 ac 76 dc d5 09 29 31 4e f0 6c fb 8e 50 63 73 c7 0e 64 48 04 e3 01 ab 57 1f e0 13 c0 80 7a 2f f9 f1 ab b8 b5 de 62 76 fd bc ea 47 4b 1b 8c 5a ef d2 22 8d 26 4d d9 15 8b e9 b2 16 19 cc e2 16 04 68 b3 8a 03 2e 21 Data Ascii: PK@YYxyK=GDETALLE DE ACTUACIN JUDICIAL RAD.05000312110120220006501.batupC:mDETALLE DE ACTUACIN JUDICIAL RAD.05000312110120220006501.batb\|g0dn[v{XQuv)1NlPcsdHWz/bvGKZ"&Mh.!
2024-10-29 23:07:16 UTC	2137	IN	Data Raw: 84 99 c7 c2 ea 61 53 4e 44 b3 4c c2 40 17 ae 40 e0 3a 93 8c 4b 1d bb 07 bb ce 4d d8 c2 ef 98 c4 3f fb 93 6e 70 c6 92 2f 33 0f 75 84 d2 5f 2d 10 1d 76 2b 4e 84 67 ca af ba 23 91 86 87 90 bf 21 b3 c5 ec 41 94 ed aa 4f c6 14 0e a4 04 27 c7 22 03 74 54 6f ce 42 cd b3 ea 74 78 d1 c4 0e 13 a0 43 b6 2e 24 fd 16 65 3d ca 1e 21 57 dc 17 db 10 4c de 9b 1b f0 6f 7b 8e 09 08 7e 07 6b 4d db e4 9c 18 8d 1b 90 f2 ac da c4 53 38 e0 45 c2 5d a8 ca 1c e1 6c 35 d0 96 a6 0a 12 d3 24 92 0c b1 c1 ae 9a 12 04 b4 27 b5 fe be da a7 a9 90 e6 31 48 5c 11 17 c2 85 06 10 13 b7 44 80 e4 e9 b4 a1 a6 b0 5b d7 1b 84 e0 ad d5 86 91 7f 01 13 02 5b 0d a2 87 f6 43 0d 7f 72 79 70 01 10 59 9e 2c 2f 58 0e 15 4f 54 6a ef e8 64 b6 c8 eb d8 43 97 d3 73 a5 38 5f d3 1e 8b e9 1c 21 67 82 2e 52 7d f7 Data Ascii: aSNDL@@:KM?np/3u_-v+Ng#!AO'"tToBtxC.$e=!WLo{~kMS8E]l5$'1H\D[[CrypY,/XOTjdCs8_!g.R}

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 4f1f6d30-a01e-0070-1ae8-27573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230714Z-15b8d89586fmhkw429ba5n22m800000008q000000000881g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: de20d122-c01e-008e-20f7-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230714Z-r197bdfb6b48v72xb403uy6hns00000007xg0000000059zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:14 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230714Z-16849878b78p49s6zkwt11bbkn00000006rg000000010d13 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-17c5cb586f6vcw6vtg5eymp4u800000005cg000000002k3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:14 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-16849878b7898p5f6vryaqvp58000000080000000000gs9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 8468344e-601e-0002-45e8-28a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-r197bdfb6b4hsj5bywyqk9r2xw00000008rg000000004dyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49836	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 62 78 75 55 32 37 4f 64 45 47 2f 36 41 32 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 63 32 65 63 37 31 39 61 30 65 32 38 32 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SbxuU27OdEG/6A2n.1Context: 37c2ec719a0e2826
2024-10-29 23:07:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:07:15 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 62 78 75 55 32 37 4f 64 45 47 2f 36 41 32 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 63 32 65 63 37 31 39 61 30 65 32 38 32 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: SbxuU27OdEG/6A2n.2Context: 37c2ec719a0e2826<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:07:15 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 53 62 78 75 55 32 37 4f 64 45 47 2f 36 41 32 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 63 32 65 63 37 31 39 61 30 65 32 38 32 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: SbxuU27OdEG/6A2n.3Context: 37c2ec719a0e2826<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-29 23:07:15 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:07:15 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 53 56 75 79 62 44 5a 69 6b 36 79 30 2f 70 59 4e 47 70 42 68 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zSVuybDZik6y0/pYNGpBhQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-17c5cb586f6mhqqby1dwph2kzs00000002eg00000000d4k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-16849878b78fkwcjkpn19c5dsn000000065g00000000kdm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-r197bdfb6b4hsj5bywyqk9r2xw00000008p000000000ap3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230715Z-r197bdfb6b4wmcgqdschtyp7yg00000007800000000046n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230716Z-16849878b782d4lwcu6h6gmxnw00000006rg000000011qfv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230716Z-16849878b787bfsh7zgp804my400000005yg00000000h38b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230716Z-17c5cb586f6lxnvg801rcb3n8n000000077g000000003cu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230716Z-17c5cb586f6wmhkn5q6fu8c5ss00000006p00000000046d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230716Z-16849878b78qf2gleqhwczd21s00000007g00000000005bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:17 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 80bd6f28-d01e-002b-3d65-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230717Z-17c5cb586f6r59nt869u8w8xt8000000064000000000fkn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230717Z-15b8d89586f4zwgbgswvrvz4vs00000008gg00000000ckdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:18 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:18 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230718Z-16849878b786jv8w2kpaf5zkqs0000000640000000006m35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:18 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 02da5d6a-901e-0064-7bf4-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230718Z-r197bdfb6b4hsj5bywyqk9r2xw00000008ng00000000cc97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:18 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bfa31533-301e-0020-4b7f-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230718Z-15b8d89586fwzdd8urmg0p1ebs0000000hyg000000000wea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a3881376-a01e-000d-19f4-27d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230718Z-r197bdfb6b47gqdjvmbpfaf2d000000002b000000000hg15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:18 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230718Z-16849878b78qwx7pmw9x5fub1c00000005ag00000000em3k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49856	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 45 48 65 75 39 53 67 6c 45 43 63 2f 2b 74 35 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 65 31 39 66 31 64 63 34 62 34 32 63 33 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tEHeu9SglECc/+t5.1Context: 15e19f1dc4b42c38
2024-10-29 23:07:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-29 23:07:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 45 48 65 75 39 53 67 6c 45 43 63 2f 2b 74 35 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 65 31 39 66 31 64 63 34 62 34 32 63 33 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 6f 63 57 32 4c 71 6c 48 56 7a 35 73 2b 50 61 30 2b 33 31 37 6a 55 53 66 75 42 70 6e 49 42 4b 44 76 62 75 63 7a 43 6b 69 33 2b 42 54 61 4a 38 52 6e 54 4f 46 31 44 59 41 34 68 61 42 62 43 55 67 58 79 4f 59 7a 50 76 7a 53 30 51 41 67 42 63 45 42 62 6f 38 4d 65 6f 53 57 67 67 62 36 6a 4f 6e 4e 42 32 2b 31 57 53 70 65 42 32 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tEHeu9SglECc/+t5.2Context: 15e19f1dc4b42c38<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUocW2LqlHVz5s+Pa0+317jUSfuBpnIBKDvbuczCki3+BTaJ8RnTOF1DYA4haBbCUgXyOYzPvzS0QAgBcEBbo8MeoSWggb6jOnNB2+1WSpeB20
2024-10-29 23:07:19 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 74 45 48 65 75 39 53 67 6c 45 43 63 2f 2b 74 35 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 35 65 31 39 66 31 64 63 34 62 34 32 63 33 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: tEHeu9SglECc/+t5.3Context: 15e19f1dc4b42c38
2024-10-29 23:07:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-29 23:07:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 75 64 66 48 55 79 62 53 30 47 2f 6a 7a 42 77 53 46 52 32 6d 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: judfHUybS0G/jzBwSFR2mw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230719Z-16849878b78qg9mlz11wgn0wcc00000006ng000000010chp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:19 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230719Z-16849878b787bfsh7zgp804my400000006100000000071y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:19 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: e75e1641-801e-00a3-2ec8-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230719Z-r197bdfb6b47gqdjvmbpfaf2d000000002dg000000008a47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230719Z-16849878b78bcpfn2qf7sm6hsn00000008t000000000gy8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:19 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230719Z-16849878b78wv88bk51myq5vxc00000007fg00000000cayx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:19 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:20 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:20 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230720Z-15b8d89586flspj6y6m5fk442w0000000d1g00000000bk6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:20 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:20 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:20 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:20 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230720Z-16849878b78qwx7pmw9x5fub1c00000005a000000000gkrr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:20 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230720Z-17c5cb586f69w69mgazyf263an00000006cg000000009ty4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:20 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230720Z-16849878b78wv88bk51myq5vxc00000007k00000000027m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a86168e1-701e-0097-7f6b-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230720Z-r197bdfb6b48v72xb403uy6hns00000007t000000000hhw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:21 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:21 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230721Z-16849878b78fssff8btnns3b1400000007f000000000e4sv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:21 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:21 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 28a40559-201e-0096-60e1-29ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230721Z-r197bdfb6b48v72xb403uy6hns00000007xg000000005a6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:21 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:21 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 6a505d8a-f01e-003f-30cf-25d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230721Z-17c5cb586f62blg5ss55p9d6fn000000080000000000chh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:21 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230721Z-16849878b78x6gn56mgecg60qc000000093000000000254t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:21 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 419dffea-201e-003c-451f-2830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230721Z-15b8d89586f989rkwt13xern5400000002c000000000ks0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:22 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:22 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230722Z-16849878b78tg5n42kspfr0x4800000007a0000000000bt4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:22 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:22 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:22 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230722Z-16849878b78tg5n42kspfr0x48000000075g00000000k905 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:22 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:22 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a74cd39-001e-0066-3b2c-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230722Z-r197bdfb6b48pcqqxhenwd2uz80000000860000000000da8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 23:07:22 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 23:07:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 23:07:22 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T230722Z-16849878b78g2m84h2v9sta29000000005z0000000010n9v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 23:07:22 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2192, Parent PID: 5812

General

Target ID:	0
Start time:	19:06:44
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4784, Parent PID: 2192

General

Target ID:	2
Start time:	19:06:48
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2008,i,16838366109820561835,7760331261309575191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7020, Parent PID: 5812

General

Target ID:	3
Start time:	19:06:51
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: unarchiver.exePID: 6048, Parent PID: 2192

General

Target ID:	7
Start time:	19:07:19
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Imagebase:	0x760000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: 7za.exePID: 7060, Parent PID: 6048

General

Target ID:	8
Start time:	19:07:19
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\czhdehiw.vs4" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Imagebase:	0xf50000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 612, Parent PID: 7060

General

Target ID:	9
Start time:	19:07:19
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: unarchiver.exePID: 2276, Parent PID: 4004

General

Target ID:	12
Start time:	19:08:03
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Imagebase:	0x130000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: 7za.exePID: 5884, Parent PID: 2276

General

Target ID:	13
Start time:	19:08:04
Start date:	29/10/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\ep1rt3ix.njb" "C:\Users\user\Downloads\DETALLE DE ACTUACI N JUDICIAL RAD.05000312110120220006501.zip"
Imagebase:	0xf50000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5712, Parent PID: 5884

General

Target ID:	14
Start time:	19:08:04
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: unarchiver.exePID: 6048, Parent PID: 2192COMMON

Execution Graph

Execution Coverage:	22.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	73
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0104B1D6 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0104B208

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 6e6ecb755d495815f5b0f490b0abfe5cdd093423116fa721ad418fd7d3f3a6b0
Instruction ID: 41bd6bacefe1cb752e8fa207129738c8e0ab9678e0b8e9745518bb3ef11eccc4
Opcode Fuzzy Hash: 6e6ecb755d495815f5b0f490b0abfe5cdd093423116fa721ad418fd7d3f3a6b0
Instruction Fuzzy Hash: D801A2B44042409FDB10DF69D985769FBD4EF05621F08C4AADD489F256D279E404CBA1

Function 0104B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0104B2F3

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: f1640abf131069cdf6dfd47a39fbe7383d85c70799b8a02e2ec94a81850afff2
Instruction ID: 6193d42a1fcea91d1592cc16acf39a9b777a1cef4084d8b13c8550a327d976ae
Opcode Fuzzy Hash: f1640abf131069cdf6dfd47a39fbe7383d85c70799b8a02e2ec94a81850afff2
Instruction Fuzzy Hash: 1D31B4B54043446FE7228B65DC45FA6BFFCEF05214F04889AE985CB162D224E909DB71

Function 0104AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0104ADA7

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: c90b7b5e4ac8a9da2d3fa2634f6c78e289e9521e69d4b3ee9e9fc32296e983f7
Instruction ID: 39610460f3da9518f57d922b6466b916f7f7e51c4ebf82978ac8afc147cd17a5
Opcode Fuzzy Hash: c90b7b5e4ac8a9da2d3fa2634f6c78e289e9521e69d4b3ee9e9fc32296e983f7
Instruction Fuzzy Hash: 5931D3B1004344AFEB228B65DC45FA7BFECEF05214F04489AFA85DB152D224A449CB71

Function 0104AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0104AC36

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 2994efe1f071fb088c652c5d6b9fe34a3de5db13c56529f7211a6b84521c2be4
Instruction ID: 753c21b36fbdaa0d634d75268d3d5dde32c4b31e88015ae9db8bea1f4f736bbe
Opcode Fuzzy Hash: 2994efe1f071fb088c652c5d6b9fe34a3de5db13c56529f7211a6b84521c2be4
Instruction Fuzzy Hash: 0D318D7150E3C0AFC3038B758C65A96BFB4AF47610F1A84CBD8C4DF1A3D2696909C7A2

Function 0104A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0104A67D

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bbac2d309d2f62241457fabde1c802e5c0bb1eee1a8d1fb952b7f29b24ec1a9c
Instruction ID: 2163ac9cec20c74c0b30c2d8440ae8bacda62c94bd4d286c7ed6995924c220fa
Opcode Fuzzy Hash: bbac2d309d2f62241457fabde1c802e5c0bb1eee1a8d1fb952b7f29b24ec1a9c
Instruction Fuzzy Hash: FD3195B1505340AFE721CF65DC85F66BFE8EF49220F08889DE9858B252D375E409CB71

Function 0104A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0104A1C2

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 82193d20f12ed6eccd5db690f7863157053072ddba5a629870938124c3939822
Instruction ID: 26358248a13458eeff3872a760dd2dda671f4bffbcb87fc4b16a582efe0b5d1d
Opcode Fuzzy Hash: 82193d20f12ed6eccd5db690f7863157053072ddba5a629870938124c3939822
Instruction Fuzzy Hash: 4421C77140D3C06FD3128B258C51B66BFB4EF47610F0945DBDD849F193D229A919CBA2

Function 0104B4FF Relevance: 1.6, APIs: 1, Instructions: 83
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0104B5A6

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 060405d380c5cb4205cbc61fd353e666af65e22f9d4a3b473c1772f31a473392
Instruction ID: d75856552419047eac25d3c0140194cb46ecc521efe2790c25f17136643bddef
Opcode Fuzzy Hash: 060405d380c5cb4205cbc61fd353e666af65e22f9d4a3b473c1772f31a473392
Instruction Fuzzy Hash: 1F210B755093C06FD3138B258C51B62BFB4EF87614F0A81CBE8849B693D225691AC7B2

Function 0104AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0104ADA7

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 9a4918ad200ed6546f2f2ff726661dd7130687f6a793c0feceece3936c4f67f9
Instruction ID: 8ad71bfa95f0520ac1b741f4e732cbaf29b0edb0fc8fc2514210313c08a34eea
Opcode Fuzzy Hash: 9a4918ad200ed6546f2f2ff726661dd7130687f6a793c0feceece3936c4f67f9
Instruction Fuzzy Hash: F721E5B1100304AFEB219F64DC85FABFBECEF04214F04886AEA869B151D734E4448BA1

Function 0104B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0104B2F3

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 09d0fce5af152f3331fd78123070dafba9c55fd68a48997a64e755fc44d3810b
Instruction ID: 89ffe1618768afd1c3ff0ec672ceb019b06abc160ac1abe2a4ca04138bcd157c
Opcode Fuzzy Hash: 09d0fce5af152f3331fd78123070dafba9c55fd68a48997a64e755fc44d3810b
Instruction Fuzzy Hash: B221B2B6400304AFEB219F65DC85FAABBECEF04714F04886AEA859B151D734E5488BA1

Function 0104A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A40C

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2dd0784438c5973a077e700a2434e3b8f268547fc436146957230f3a9a7ac65f
Instruction ID: 208d9262460500d62510b830c527af5f1354a5b8cc708c9d51028900850d16f2
Opcode Fuzzy Hash: 2dd0784438c5973a077e700a2434e3b8f268547fc436146957230f3a9a7ac65f
Instruction Fuzzy Hash: C3218DB5604744AFE721CF15CC84FA7BBFCEF45610F0884AAEA85CB252D364E948CB61

Function 0104A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A8DE

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 9030b380b34ad6a6344fcc6833923848dfd38b42b756ea94b64efb60d2aee800
Instruction ID: cc64b3a075b435d385d886005fd9c9607eea67edd163df306bff37e96240f8db
Opcode Fuzzy Hash: 9030b380b34ad6a6344fcc6833923848dfd38b42b756ea94b64efb60d2aee800
Instruction Fuzzy Hash: AA21D8754093806FE7128B64DC45FA6BFB8EF46714F0988DAE984DF153C224A909C771

Function 0104A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A9C1

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: caa1f73642e0c5605823741a1fe1844fafba4f9c3d7285baf9e13aff7ffd9210
Instruction ID: 3d4ebeb3572605d2dc07037b3ad054c3bf489d6656f1727e66b8bec3db0f9372
Opcode Fuzzy Hash: caa1f73642e0c5605823741a1fe1844fafba4f9c3d7285baf9e13aff7ffd9210
Instruction Fuzzy Hash: EE21B575409380AFD722CF65DC45F96BFB8EF06214F0888DAE9859F152C375A548CB71

Function 0104A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0104A67D

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 30c1a306f58b7533c57ccdec27ef4e7980778e9e0e28e9e91d0de194d1d42f16
Instruction ID: 1a70d024e46cac30e4b4d05b98f6a164173a473547b9c44d30a8868c16b8abd8
Opcode Fuzzy Hash: 30c1a306f58b7533c57ccdec27ef4e7980778e9e0e28e9e91d0de194d1d42f16
Instruction Fuzzy Hash: F12190B5600300EFE721DF69DD85F66FBE8EF08624F088869EA868B251D775E404CB61

Function 0104A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A815

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: e16736a7eff05fd1bcb7e139b4181a0385b78a442624ff79fd425be35e2de9bf
Instruction ID: cd7f6504b8cc80feef5697eba03541be5869532165cdbc25cad51f80a86836a1
Opcode Fuzzy Hash: e16736a7eff05fd1bcb7e139b4181a0385b78a442624ff79fd425be35e2de9bf
Instruction Fuzzy Hash: 1B21D8B54093806FE7128B65DC81BA6BFA8DF47714F0884DBE9858F153D268A909C771

Function 0104AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0104AA8B

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 4247f50cf5ca9bb101e377fec859290fab5c8a1119b9e615dcb045eb3b40636a
Instruction ID: 3f20d44fe3e2f521d2e240c7170e167e1c21c57dbbc14680c0d96265b2ecf7d8
Opcode Fuzzy Hash: 4247f50cf5ca9bb101e377fec859290fab5c8a1119b9e615dcb045eb3b40636a
Instruction Fuzzy Hash: A021A1B55083809FE712CB29DC95B92BFE8AF06214F0D84EAE985CF153D324D909CB61

Function 0104A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A40C

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: f6013b591eac6864f24cef013aa67b725523e825408eb051bc27aa2ba5b10861
Instruction ID: b018872fa8c61f26c6dec3d168348f07a7a3eb4f19a1d5844947e293a9354023
Opcode Fuzzy Hash: f6013b591eac6864f24cef013aa67b725523e825408eb051bc27aa2ba5b10861
Instruction Fuzzy Hash: 052181B56006049FE721CE69CC85FA7F7ECEF44610F0484AAEA468B251D764E945CA71

Function 0104A962 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A9C1

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 719d055604d24bd0ae95b5df08654b8d4458318a1d192b6ffd1893779c5ade1a
Instruction ID: 8ab88e96f76a1a2c4008aa44a07e99ee34437d5fbda9c30a55c715f4f592cd8b
Opcode Fuzzy Hash: 719d055604d24bd0ae95b5df08654b8d4458318a1d192b6ffd1893779c5ade1a
Instruction Fuzzy Hash: CA11C4B9500300AFEB21DF69DC85FAAFBE8EF04724F04886AEE459B151D374A544CBB1

Function 0104A882 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A8DE

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 963113bdc6b94543ec54cd0bc20939ebbd4375a4495957367b37e4d7ae9d599e
Instruction ID: 9dd185f1724497179024118d1257c32c2b89c171d82939c489f8f266f57086c4
Opcode Fuzzy Hash: 963113bdc6b94543ec54cd0bc20939ebbd4375a4495957367b37e4d7ae9d599e
Instruction Fuzzy Hash: D311C4B5500304AFEB21DF68DC85BA6FBE8EF44724F0488AAEE459B141D374A544CBB1

Function 0104A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0104A30C

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: a96763666125ad6d9e8a5cb79629af8bb50008b5ab3e185345329b6decf8fb2b
Instruction ID: 9170873ad3061e152ce273a752a75b511fa256eb8c2db857e22da2dda9b96dea
Opcode Fuzzy Hash: a96763666125ad6d9e8a5cb79629af8bb50008b5ab3e185345329b6decf8fb2b
Instruction Fuzzy Hash: 731173B55097C49FDB238B25DC94A52BFB4DF07220F0980DBED858F263D265A849CB72

Function 0104AF8B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0104AFE4

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 52a9ac2b3bf90e8cdbec86df86cb613a4f2f3ba299e7f2209bb8aed652ac8749
Instruction ID: 714a866fa7aa69d9fec59a4c81da24a903ac3c5e9c9f45e189a959b9f8e7b274
Opcode Fuzzy Hash: 52a9ac2b3bf90e8cdbec86df86cb613a4f2f3ba299e7f2209bb8aed652ac8749
Instruction Fuzzy Hash: CE119EB55093849FD7128B29DC85A52BFF4EF06220F0984EAE9858B263D265A848CB61

Function 0104B1B4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0104B208

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 995d6e2a7b1bc6eb440bfadbde5f8cd17e4997b29b39bb7a6d8b4bd357d52b9b
Instruction ID: b9bd3f0ee866e1e44d2f259525fe547a66f8a901e9e1de58cce0aba2a30790a1
Opcode Fuzzy Hash: 995d6e2a7b1bc6eb440bfadbde5f8cd17e4997b29b39bb7a6d8b4bd357d52b9b
Instruction Fuzzy Hash: FF1173714093849FD7128F25DD84B56FFE4DF46220F0984EADD849F253D275A908CB62

Function 0104AA46 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0104AA8B

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 2d1910d45bcad1b35d551056ededb8eed0539e556dda6644499f93cda74a9d56
Instruction ID: 7b29650582bb34c4e59a530dff7a114c1b0a58eab2f3c7356bfd140381cab8ef
Opcode Fuzzy Hash: 2d1910d45bcad1b35d551056ededb8eed0539e556dda6644499f93cda74a9d56
Instruction Fuzzy Hash: F9118EB56002409FEB50DF69D985B66FBD8EF04620F08C4AADD8ACB252E734E414CA61

Function 0104A7C2 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,2A58F87E,00000000,00000000,00000000,00000000), ref: 0104A815

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 2583d48e5f2420a47555b776c7561581241758786c6d12e8798a3636a15c7718
Instruction ID: b216f9784a3eac425c870d5ddb29bd0950391f9f9c453b66eddcfccb2a11c001
Opcode Fuzzy Hash: 2583d48e5f2420a47555b776c7561581241758786c6d12e8798a3636a15c7718
Instruction Fuzzy Hash: F001D6B5504304AFE720DB19DC85BA6FBD8DF04724F04C4AAEE458F242D378E548CAB5

Function 0104ABE6 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0104AC36

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: a6ddda133e79f448f14a2e5fe05e14d8368b9ea1a9eb8b4e78c61e6f11f5e741
Instruction ID: fdedef824b50250ab709eac42ffac70d44b8925fad4b7c877f5876ca738620df
Opcode Fuzzy Hash: a6ddda133e79f448f14a2e5fe05e14d8368b9ea1a9eb8b4e78c61e6f11f5e741
Instruction Fuzzy Hash: 0701B171500200AFD350DF1ACC86B26FBE8FB88A20F14852AED089B641D735F915CBE1

Function 0104A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0104A1C2

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 9838d94b2eab4d804c9210a23718e9df95431a2defac8c8cd32bcaa236a3ac22
Instruction ID: d9a4a6e66a4d15ab9ab7907ee3f0c6ee25321aff80b5a11dcbae96fc0ff8186c
Opcode Fuzzy Hash: 9838d94b2eab4d804c9210a23718e9df95431a2defac8c8cd32bcaa236a3ac22
Instruction Fuzzy Hash: B6017171500201AFD350DF1ADC86B26FBE8EB88A20F14856AED089B645D735F915CBE5

Function 0104B556 Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0104B5A6

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2cb507d4a43234b4a7123905b91f0e704485b6516aa1c2c17ae780b1cac87d16
Instruction ID: 3b7d0f712148bf666e6645c93078c9fd347d183955175241437f23dc4bd4ea46
Opcode Fuzzy Hash: 2cb507d4a43234b4a7123905b91f0e704485b6516aa1c2c17ae780b1cac87d16
Instruction Fuzzy Hash: E301AD71600201ABD310DF1ACC86B26FBE8FB88A20F14811AED085B781D775F915CBE6

Function 0104AFB2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0104AFE4

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 08ce6d00c8877b54b8b22a71cb978ffc6428eb11aa480609c43a8ef9d6f8a2b5
Instruction ID: e3e6d3e4db3f433738fa663951c22ad2f24fc4f81be9e751d007ce1130927165
Opcode Fuzzy Hash: 08ce6d00c8877b54b8b22a71cb978ffc6428eb11aa480609c43a8ef9d6f8a2b5
Instruction Fuzzy Hash: 7101D1B56002449FDB109F29D8C5766FBD4EF04721F08C0AAED468B292D279E848CEA2

Function 0104A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0104A30C

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 5d08ed61c1fba7c7ddaa35ac7e397436b4dab39d79368e0089cdad48136eaa5e
Instruction ID: 129e6b68257994085c0ecaf53f8a50de9ca908e3b3ca08b03cb228a32a54b76c
Opcode Fuzzy Hash: 5d08ed61c1fba7c7ddaa35ac7e397436b4dab39d79368e0089cdad48136eaa5e
Instruction Fuzzy Hash: FFF0A475504244DFDB109F19D8C5765FBD4DF04621F08C0EAED454F256E3B9A444CEA2

Function 0104A6D4 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0104A748

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 50c656f53eb5c3c5b8c41e2df466781fd7d0d8cc83d21240dc803947463d128e
Instruction ID: 89ef2bc56b683b5cfa1e1b9ea0ab8ebb2c48369dcc744c2ab8f4c8c6a5909f93
Opcode Fuzzy Hash: 50c656f53eb5c3c5b8c41e2df466781fd7d0d8cc83d21240dc803947463d128e
Instruction Fuzzy Hash: 782192B55097C49FD7128B29DC95792BFB4AF07320F0984EBDC858F1A3D2249909C771

Function 0104A716 Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0104A748

Memory Dump Source

Source File: 00000007.00000002.2955943499.000000000104A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0104A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_104a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 5a5c083274d5f0cb49460aad9d26ee8c2e6cb15fe01835c7ecc0d213ffc5c301
Instruction ID: 3d50ea4feb165df6dc88f9296be1343cc61e2c3f96bf2bb7b82bf654634efef8
Opcode Fuzzy Hash: 5a5c083274d5f0cb49460aad9d26ee8c2e6cb15fe01835c7ecc0d213ffc5c301
Instruction Fuzzy Hash: 7601DFB5A00240DFDB20DF29DD85766FBE4EF04220F08C4BADD4A8F252D278E444CAA1

Function 04F20E42 Relevance: 1.2, Instructions: 1189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58e286bafa90cc7cbb6f000df5f5d46775234012233e044242df6a74305fe22a
Instruction ID: bcc717bae9445034542fab5471f43f21d12a2cf5c8e02f203201058571befb9d
Opcode Fuzzy Hash: 58e286bafa90cc7cbb6f000df5f5d46775234012233e044242df6a74305fe22a
Instruction Fuzzy Hash: 8561BB32B01225DFDB24EF74D65466AB7E2AF88308F158529D9029B395DF76DC42CB80

Function 04F202C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96dfd3be72c9f154c7ba54f6469d4e1729c2f320b63f1cef093340c48c516a7e
Instruction ID: 4dbb879bf031bbe6336b41dd6d998a4bea0e107aadcafa5d918a2c79e1c4c795
Opcode Fuzzy Hash: 96dfd3be72c9f154c7ba54f6469d4e1729c2f320b63f1cef093340c48c516a7e
Instruction Fuzzy Hash: 0EB12136702210CFC724EF64F959A6E7BB2FF88350B548828E9069B359DF359C21CB91

Function 04F20799 Relevance: .3, Instructions: 282COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2855cca8c4d1a0bfe3f8c83c58bc339244c11259bc556439d0c01f1950c2575e
Instruction ID: 50f3163ebcfbedef75bf92d4c65cb1d16910a15ff53c638e82858466f603d3d7
Opcode Fuzzy Hash: 2855cca8c4d1a0bfe3f8c83c58bc339244c11259bc556439d0c01f1950c2575e
Instruction Fuzzy Hash: 51A19F35B012218FDB14ABB8D56977E73F3AF84308F158829D9069B399DF399C12CB91

Function 04F210A5 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ccb0963f063466d536e06ff59df61811be50842c7ed1b136da02351a72ea21a
Instruction ID: 07d07226a4e0a3f732e7b4da4595307c2e34d30f02d7e89fcea497f62d6a240b
Opcode Fuzzy Hash: 2ccb0963f063466d536e06ff59df61811be50842c7ed1b136da02351a72ea21a
Instruction Fuzzy Hash: 26313931B01124CFDB24EB64D258AADB7F2FF88304B218569E9019B355DB76EC42CB90

Function 04F20C99 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08c7f1983279191a8771776623ed595d28e6a3daf1720774d6b7c056f5301d6b
Instruction ID: bcd9c18eaa32f085663953957cd3c1bbc8083dde138df4e40a2494b127215f93
Opcode Fuzzy Hash: 08c7f1983279191a8771776623ed595d28e6a3daf1720774d6b7c056f5301d6b
Instruction Fuzzy Hash: A0212971B003114FC765EA39C4447AFB7E7AFD5204B89842CE085D7342DF36E9068796

Function 04F20CA8 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbb75e9a9436d81b9381967e923571943220f813f03cc0956f8d07f5b341f737
Instruction ID: 73cf012efb9ff2dc5521d167f7f2bfc6f217c2c722ffadb39446c2c77c1d2afc
Opcode Fuzzy Hash: fbb75e9a9436d81b9381967e923571943220f813f03cc0956f8d07f5b341f737
Instruction Fuzzy Hash: 1921E571B003158BC724EB39C5546AFB7E7AFC5208B45882CE185DB342DF7AE90687D6

Function 04F20B8F Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75bf687aad8ba33ab5cf07f6340ff51f256cbc9cca2e55e076b5458562f0a938
Instruction ID: 12c7c5ebc320a9899d49ad823bf2d99fee8281802491f8e4e4e707c547c66dfc
Opcode Fuzzy Hash: 75bf687aad8ba33ab5cf07f6340ff51f256cbc9cca2e55e076b5458562f0a938
Instruction Fuzzy Hash: EB11B932A101186FCB05DBB4D84899F7BF2FF892147164879D605E7366DF319815C781

Function 04F20BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a63f3a234a24a5da8d0e607526c9301fab1dbc1ad32ebad56c1c792cf9e30961
Instruction ID: 8cd1c3563a89bf3244803dae5e8cad769d8c207c7053ebbf78dd8a7282a27b91
Opcode Fuzzy Hash: a63f3a234a24a5da8d0e607526c9301fab1dbc1ad32ebad56c1c792cf9e30961
Instruction Fuzzy Hash: 21117732B101186FCB04ABB4D848D9F7BF6FF88214B164979D605E7365DF31A8168791

Function 01270808 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2957238432.0000000001270000.00000040.00000020.00020000.00000000.sdmp, Offset: 01270000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1270000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9270f93f3b97ec680fe2185ed9fd2a5f8b0e3761e00c620d5f4918c5da9f28e
Instruction ID: 7aef55bd0dbdfd5fb0ab8eb6a94a25c06a97c16c8519010a299200fa1342ea9b
Opcode Fuzzy Hash: a9270f93f3b97ec680fe2185ed9fd2a5f8b0e3761e00c620d5f4918c5da9f28e
Instruction Fuzzy Hash: FA01D4F24093446FD301CB55EC41D57BBE8EF86524F09C8AAEC488B202E225E908CBB2

Function 012705E0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2957238432.0000000001270000.00000040.00000020.00020000.00000000.sdmp, Offset: 01270000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1270000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ecb52de0b9c3e27bfd22bc774990e129bc83e1559d6eab62d335aab6cab0bcd
Instruction ID: 86abc0ac7ca556db5fa9f857d002b2f937e89af627123af48332e8eb17862538
Opcode Fuzzy Hash: 9ecb52de0b9c3e27bfd22bc774990e129bc83e1559d6eab62d335aab6cab0bcd
Instruction Fuzzy Hash: DE01D6B640D3906FC7128B159C50863FFA8DE86530709C4DFEC498B652D229A809CBB2

Function 0127082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2957238432.0000000001270000.00000040.00000020.00020000.00000000.sdmp, Offset: 01270000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1270000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ef8bb9a12608fdfd23f877f9067d2bb3540713e39cbd6c48eb47884202138fe
Instruction ID: 16ab08a1d9640d0b4501d3f1e00489080e00b2ed38aad435d36fd3b617409f87
Opcode Fuzzy Hash: 6ef8bb9a12608fdfd23f877f9067d2bb3540713e39cbd6c48eb47884202138fe
Instruction Fuzzy Hash: EBF082F28052046F9200DF55ED46866F7ECDF85525F04C57AEC088B300E276A9158AE2

Function 01270606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2957238432.0000000001270000.00000040.00000020.00020000.00000000.sdmp, Offset: 01270000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1270000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48b2cffa5a1938fab3a6b5cac6ae0d213765c98b5956aad204e9b89e097fa906
Instruction ID: efc3efdbdf6a387f5681f3ba5a2900c5add9cf89090a77767d7bd5d69992bf24
Opcode Fuzzy Hash: 48b2cffa5a1938fab3a6b5cac6ae0d213765c98b5956aad204e9b89e097fa906
Instruction Fuzzy Hash: E5E092B66006045B9750DF0AEC81462F7D8EB88630708C47FDC0D8B701D239B508CEA5

Function 04F20C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81e708a0ca723488e6a864a0313e0812af4ced37d33e55dd5b371c10b3988b21
Instruction ID: 46605e4a59c843f3155e0b8f0a045cc59e7c994cdda7363d7e4828ade85d671c
Opcode Fuzzy Hash: 81e708a0ca723488e6a864a0313e0812af4ced37d33e55dd5b371c10b3988b21
Instruction Fuzzy Hash: 49E09272F113541FCB84DAB854541AE7FA1DB95260B56457AD009D7241EE3598038740

Function 04F20C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57cfd8de2c098d3ec166a11495a1e97e1d79b9b6adf0abf92177448bdfa30aa0
Instruction ID: 39ff7e62746dd7c1b53e94890a22a7e9155b9db2850cf27886218913666ea102
Opcode Fuzzy Hash: 57cfd8de2c098d3ec166a11495a1e97e1d79b9b6adf0abf92177448bdfa30aa0
Instruction Fuzzy Hash: 07D01231F042181B8B48EEF9584859E7BEA9B84164B65847ED009D7341EF35E94287D0

Function 04F20E08 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed460f33cf599cf42c88839d72616821e3c7e577c33463745d6f4404b7c86227
Instruction ID: c654d87dac3236691bd2265325f25b9bf6a5c07981f079b8de69767c685d17a4
Opcode Fuzzy Hash: ed460f33cf599cf42c88839d72616821e3c7e577c33463745d6f4404b7c86227
Instruction Fuzzy Hash: 57D02E33A003008FCB058320E909BE877A0ABE4304FD9C22880088B391EA3AC882C600

Function 010423F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2955889903.0000000001042000.00000040.00000800.00020000.00000000.sdmp, Offset: 01042000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1042000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34b9b30943b2e4c059302a6a02baecb8df6973e45c1bf29346583321f7f8fe0a
Instruction ID: 442c4321d0094ffb4d696f44514d1184c9e76210e1846932ea64213074d67850
Opcode Fuzzy Hash: 34b9b30943b2e4c059302a6a02baecb8df6973e45c1bf29346583321f7f8fe0a
Instruction Fuzzy Hash: 15D02EB93006804FE312CA1CD1E8BA53BE4AB80704F0A04F9A840CB7A3CB28D4C0C200

Function 010423BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2955889903.0000000001042000.00000040.00000800.00020000.00000000.sdmp, Offset: 01042000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1042000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b464518a21e1612d347555c6dd38093fd97468f5b14f3f2e51153d33fa86170
Instruction ID: 806309f928090804302914dc27af52063e9b9249fa03cb736e52bb12ba5c5d45
Opcode Fuzzy Hash: 8b464518a21e1612d347555c6dd38093fd97468f5b14f3f2e51153d33fa86170
Instruction Fuzzy Hash: 9CD05E743002818BD719DA1CD2D4F5937E4AB40715F0684F8BC508B262C7A8D8C0DA00

Function 04F20DD1 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07e46ffb5ae2dc6ee9dc7ed5764092cd87da8aae80d277bd169d7247ed8fd968
Instruction ID: f105ead5ac42dfa4e73c09efbc06d9df01421b5e503b17ce80b099867e7da986
Opcode Fuzzy Hash: 07e46ffb5ae2dc6ee9dc7ed5764092cd87da8aae80d277bd169d7247ed8fd968
Instruction Fuzzy Hash: CFD0A7322041008FD7059724DE18B6537526BD030EF8EC578C8085B795CB39E494C340

Function 04F20E18 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07e887357ed131f635f34fbe2797110c6e008f5bdda0cdfea36f7f7e07eb0b28
Instruction ID: 935f459e22b2b58d5601bac72eaf2416788c321ab1f0146ea30f611362f2e86a
Opcode Fuzzy Hash: 07e887357ed131f635f34fbe2797110c6e008f5bdda0cdfea36f7f7e07eb0b28
Instruction Fuzzy Hash: B3C012322002148FC704A768DA18A2977956BD8308F99C56485085B355CF74F841C644

Function 04F20DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2960345484.0000000004F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f20000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b7e26cb4c84aa5ee2acd2f235f6c2ca747d9db4a17da154e8d3f53d7aa9f5be
Instruction ID: 656623836081d05f835eafbd95b51226ca30ef5888832d92e609c6425babf112
Opcode Fuzzy Hash: 6b7e26cb4c84aa5ee2acd2f235f6c2ca747d9db4a17da154e8d3f53d7aa9f5be
Instruction Fuzzy Hash: 84C012312002148FD704A768D918A2573966BD4308F59C56485085B355CF74F881C684

Analysis Process: unarchiver.exePID: 2276, Parent PID: 4004COMMON

Execution Graph

Execution Coverage:	22%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	73
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00A4B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 00A4B2F3

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 049a10a58c840ec82ad826e6867126c40e9246d70e59e691fb26c549f231bd7f
Instruction ID: d2221cb12b7bf24d96d610082e952843b03f89008a524596cf170868751435b5
Opcode Fuzzy Hash: 049a10a58c840ec82ad826e6867126c40e9246d70e59e691fb26c549f231bd7f
Instruction Fuzzy Hash: B031B4754043446FE7228F65DC45FA6BFBCEF46314F04489AE985CB162D324A909DB71

Function 00A4AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 00A4ADA7

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: ea8f0c95948ac233fb59ef92d01490fce9587543e6c6fed8ad4b68bc9b5f936f
Instruction ID: 3e4aab900b00226c3463d2df397323045bde86fd9268294345fbdfc93100832f
Opcode Fuzzy Hash: ea8f0c95948ac233fb59ef92d01490fce9587543e6c6fed8ad4b68bc9b5f936f
Instruction Fuzzy Hash: FF31D371404344AFEB228B65DC45FA7BFACEF05324F04489AF985CB152D324A849CB71

Function 00A4AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 00A4AC36

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 4867bcc14bd6cb8a3daf33fe25c000403dc92a7853988a6fa7f950a28119c136
Instruction ID: c577f59a9a1c3c14ce2ba7dede562ec3e16b61214dec674fa84fd6bbf7bbdc8a
Opcode Fuzzy Hash: 4867bcc14bd6cb8a3daf33fe25c000403dc92a7853988a6fa7f950a28119c136
Instruction Fuzzy Hash: 95317E7150E3C06FD3038B758C65A56BFB4AF47610F1A84CBD8C4DF1A3D2696919C7A2

Function 00A4A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 00A4A67D

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 68fc79ad729737999ac06bce7de0b173c6e7bf9a58e2896bb980c5ec6e6134b8
Instruction ID: c59f6198600a8cba09870a2010596dd9213a65e829511bffe016b358627d1bc8
Opcode Fuzzy Hash: 68fc79ad729737999ac06bce7de0b173c6e7bf9a58e2896bb980c5ec6e6134b8
Instruction Fuzzy Hash: 7E319375505340AFE721CF65DC45F66FBE8EF45220F08889EE9858B252D375E809CB71

Function 00A4A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 00A4A1C2

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: a77e63d4062e57e5440c57745335579f504d9b72eee2dba8868b4ffd87445673
Instruction ID: 329e13cf18eeb6546bae13980ba24a1ecf3d1f2e4c4386f1875d91896a87ad3f
Opcode Fuzzy Hash: a77e63d4062e57e5440c57745335579f504d9b72eee2dba8868b4ffd87445673
Instruction Fuzzy Hash: 7A21B57140D3C06FD3128B258C51B66BFB4EF47620F0945DBDD849F193D329A919CBA2

Function 00A4B5D7 Relevance: 1.6, APIs: 1, Instructions: 83
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 00A4B67E

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 8b21d3ee73264177c5900e9c8812e01c72ab1f0cf33df2e18fc633094ae1594b
Instruction ID: a02ec028c848d6ad2049876c65463a9b972729652e8979edf861ed8d1e2f1d30
Opcode Fuzzy Hash: 8b21d3ee73264177c5900e9c8812e01c72ab1f0cf33df2e18fc633094ae1594b
Instruction Fuzzy Hash: 98210B755093C06FD3138B258C51B62BFB4EF87614F0A81CBE8848B693D229691AC7B2

Function 00A4AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 00A4ADA7

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: c01c15fdc832a541986f861aef286a5ca42cc6dbdfee10c0977e29cc27725199
Instruction ID: 802d14aa5b436d23d4bed22844745170c29e5626b0f7cd8af7e2c502427c3819
Opcode Fuzzy Hash: c01c15fdc832a541986f861aef286a5ca42cc6dbdfee10c0977e29cc27725199
Instruction Fuzzy Hash: C521E076400304AFEB219F65DC45FABFBECEF08324F04886AEA45CB651D734E4488BA1

Function 00A4B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 00A4B2F3

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 60213f14147de1610639f24ae2436d04f651eb0be913ca7676f1a777ecd2c23f
Instruction ID: 3b2fde280d726a97eac7fd5bb3ae96361cd1f87fa2f425804bbe98c985bab20c
Opcode Fuzzy Hash: 60213f14147de1610639f24ae2436d04f651eb0be913ca7676f1a777ecd2c23f
Instruction Fuzzy Hash: A421E076400304AFEB219F65CC45FAABBECEF08324F04886AEA45CB651D734E5488BB1

Function 00A4A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A40C

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2d452afb71472534cb209f038cd2a79887d7e5bcc91db882797ff2e9131d5436
Instruction ID: b629ef92adcb93ed91bbb563e9bf518c3770f1eeec4bf164d87522f37aee8b83
Opcode Fuzzy Hash: 2d452afb71472534cb209f038cd2a79887d7e5bcc91db882797ff2e9131d5436
Instruction Fuzzy Hash: 28217CB9504740AFD721CF15CC84FA7BBE8AF55610F08849AE985CB252D364E948CB62

Function 00A4A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A8DE

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 0c3531992e756722fb20acbbdaeeb525ff463152a1ec2a90a3a5580c84ff4477
Instruction ID: aab7e4dbc7dd0d7bcef7f88b1ae62ac6f03ed0876e8591a1787a095521af485e
Opcode Fuzzy Hash: 0c3531992e756722fb20acbbdaeeb525ff463152a1ec2a90a3a5580c84ff4477
Instruction Fuzzy Hash: EA21D6754093806FE7228F64DC45FA6BFB8EF46714F0988DAE984CF153C224A909C771

Function 00A4A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A9C1

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 4c92ee6bfcb94a4baff6cf369252952b0777a9788af55c5e86f012b732bf527f
Instruction ID: 5c42dfb013577fdebf5b38af598756e922c2062c8f7101eef0466055789ed562
Opcode Fuzzy Hash: 4c92ee6bfcb94a4baff6cf369252952b0777a9788af55c5e86f012b732bf527f
Instruction Fuzzy Hash: AA21A175409380AFDB228F65DC45F96BFB8EF46314F08889AE9849F152C365A548CBB2

Function 00A4A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 00A4A67D

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1f4edb3f34d85bf31ead3070170feb4fea632d818f84652e25b026c2ad6a31dc
Instruction ID: 5f95ce1a2f2a1106d4cba9ef34a61745d62124363d44bdc4c0e020f353443c6f
Opcode Fuzzy Hash: 1f4edb3f34d85bf31ead3070170feb4fea632d818f84652e25b026c2ad6a31dc
Instruction Fuzzy Hash: A521C179500300AFEB21DF65DC85F66FBE8EF18320F088869EA858B251D375E804CB72

Function 00A4A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A815

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 1dbefb869e7ae7e03e7b6a07a7300dbdcb24c17a15e6e1afc4f880acc8811819
Instruction ID: c9fc45ff3831526b667678b0760fbece924519bb93cb9c5e11ce9c1e3826844a
Opcode Fuzzy Hash: 1dbefb869e7ae7e03e7b6a07a7300dbdcb24c17a15e6e1afc4f880acc8811819
Instruction Fuzzy Hash: 4F21D8B54093806FE7128B25DC41BA6BFA8DF47714F0884D7E9848F153D268A909C771

Function 00A4AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 00A4AA8B

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 3fc3557171d482114b857311bd9e60f373a7d7b1fc8cf76967defea484cb2fb7
Instruction ID: a7d334c9a69763f6b7d6ad75fc142ad1a052834951eb03c90ea8ed168a1c5d80
Opcode Fuzzy Hash: 3fc3557171d482114b857311bd9e60f373a7d7b1fc8cf76967defea484cb2fb7
Instruction Fuzzy Hash: EC21C2755083C05FEB12CB29DC55B92BFE8AF56314F0D84EAE884CF153D224D909CB61

Function 00A4A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A40C

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 450dad9c9274056b57b020714a5ee374c2f04e4ce5f27eaa87f9d03f546b0721
Instruction ID: 0a2e44d27d231bd57e19b6bf278038292af3e9b6e1d4c944d7e961f1b34e82eb
Opcode Fuzzy Hash: 450dad9c9274056b57b020714a5ee374c2f04e4ce5f27eaa87f9d03f546b0721
Instruction Fuzzy Hash: 56216D796406049EE720CF25CC85FA6B7ECEF54710F08845AE9458B251D764E945CAB2

Function 00A4A962 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A9C1

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 42b431cfe5355304e40ea3b8b79f2e6d5d8994805b56ebe92499b1d042de62d0
Instruction ID: ecb148afd4677c77564863f7899889878ee22946176a8061637618b260640a84
Opcode Fuzzy Hash: 42b431cfe5355304e40ea3b8b79f2e6d5d8994805b56ebe92499b1d042de62d0
Instruction Fuzzy Hash: 4711C475400300AFEB21CF65DC85FA6FBE8EF54724F04885AEE459B152D378A544CBB2

Function 00A4A882 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A8DE

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: fb02fd7b6825b8946f8d6aad88c56d6d58eacc55df212a12241c013d430d7b8e
Instruction ID: 81badaa7bba23bf9115c23780a2d1a082b911ff5c1041ffad0fa05fc39cee7c3
Opcode Fuzzy Hash: fb02fd7b6825b8946f8d6aad88c56d6d58eacc55df212a12241c013d430d7b8e
Instruction Fuzzy Hash: 2D11C179400300AFEB21DF68DC85BA6FBE8EF54724F14885AEE459B241D378A5448BB2

Function 00A4A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 00A4A30C

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 7c0259bed55d4d149e3057c62e2b94671be02cdfcfc1f72b1395a7bc71673cfe
Instruction ID: 9f2ce7613c2cf15a5e7eb4f7556688da94a68cb5696e523d0b1ef549f127384d
Opcode Fuzzy Hash: 7c0259bed55d4d149e3057c62e2b94671be02cdfcfc1f72b1395a7bc71673cfe
Instruction Fuzzy Hash: BD11A3754093C09FDB228F25DC94A52BFB4DF57220F0980DBDD858F263D265A809CB72

Function 00A4B1B4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 00A4B208

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 0a63d81d1e6efa03c7e09c132f2236e08a751583098767b2332f9ec01b5f2792
Instruction ID: 2787511b521fbe8dae481924ffc2933b86866166e2f23f42d689b61a5d623d0b
Opcode Fuzzy Hash: 0a63d81d1e6efa03c7e09c132f2236e08a751583098767b2332f9ec01b5f2792
Instruction Fuzzy Hash: 371170754093809FDB128F25DC84B56FFA4EF56220F0984DAED849F252D275A908CB72

Function 00A4AF8B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 00A4AFE4

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 1cf4e54ccfcfeda8cc127bff81b5dbf66fa04cfc312937981d65a4f3b8e486b4
Instruction ID: a39d15c82a4175a070270823387e6e1bb246f925281dd8f15dd20f021a977369
Opcode Fuzzy Hash: 1cf4e54ccfcfeda8cc127bff81b5dbf66fa04cfc312937981d65a4f3b8e486b4
Instruction Fuzzy Hash: 08119E755093809FDB128B25DC85A52BFF4EF46220F0984DAE9858B262D369A848CB61

Function 00A4AA46 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 00A4AA8B

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: b9f24028d32fbfb7b1974c97d14c0f453cfa6e44678a200b0b620ddebaa9b5c5
Instruction ID: 4a434e21223e435ce4cb09ade61900283ce4bd9269a2c6a5d5f8191e298f23bc
Opcode Fuzzy Hash: b9f24028d32fbfb7b1974c97d14c0f453cfa6e44678a200b0b620ddebaa9b5c5
Instruction Fuzzy Hash: 91118E796002409FEB10CF29D985B66FBE8EF54760F08C4AADD49CB242E674E804CA62

Function 00A4A7C2 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,4D699591,00000000,00000000,00000000,00000000), ref: 00A4A815

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: c399abd279c7fdeef74af9539868219d38d3a6c64dd71d98871ea02a5b4f8da1
Instruction ID: 583bc82aafa810a86b191f6832076ea3b584ccfc5fb34f6a6bc9c20ab272f8cf
Opcode Fuzzy Hash: c399abd279c7fdeef74af9539868219d38d3a6c64dd71d98871ea02a5b4f8da1
Instruction Fuzzy Hash: 8B01D679504300AEE720DB25DC85BA6F7E8DF54724F14C496EE058F241D378A9448AB6

Function 00A4ABE6 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 00A4AC36

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 714855e1070280ea8065aba79f0f908029adf76dbe1cbbc356e3fbb7382511e8
Instruction ID: 8c52a7c649037c415d4e45a0e2affb5e649c3df6025e1d8b9d398a4ab08d1b60
Opcode Fuzzy Hash: 714855e1070280ea8065aba79f0f908029adf76dbe1cbbc356e3fbb7382511e8
Instruction Fuzzy Hash: 17017171500201AFD350DF1ADC46B26FBE8FB88A20F14856AED489B641D735F915CBE5

Function 00A4A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 00A4A1C2

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 911ea6edea4f3c22f195404928218b3932f539786411b4b653a32a2bffdae624
Instruction ID: b193b74c2ab0dba2b5c70a9d4388547cd1f6b9bd0a9017b4f6ba98a36f1512d4
Opcode Fuzzy Hash: 911ea6edea4f3c22f195404928218b3932f539786411b4b653a32a2bffdae624
Instruction Fuzzy Hash: 0601B171500200AFD310DF1ACC46B26FBE8EB88A20F14856AEC089B641D735F911CBE1

Function 00A4B62E Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 00A4B67E

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 9d611263b378719a5ef61070266930cfc1748a90ba8c47f7156609dd69e2e00c
Instruction ID: 3fcfc92802d9336da511acedc245f9bfdddbd9d50ee7f2e4bad053f029456a16
Opcode Fuzzy Hash: 9d611263b378719a5ef61070266930cfc1748a90ba8c47f7156609dd69e2e00c
Instruction Fuzzy Hash: 8A01A271500201ABD210DF1ACC46B26FBE8FB88A20F14815AEC085B741D775F915CBE5

Function 00A4AFB2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 00A4AFE4

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: c88eda918ec973cd401bbdfd5c8a7611fa35d48f336da64b08a1c24d8d6e4dda
Instruction ID: e94b4319a28bf5ac2a3e2208311edae7ed6d04b7d19e2e64a975081ca0568e84
Opcode Fuzzy Hash: c88eda918ec973cd401bbdfd5c8a7611fa35d48f336da64b08a1c24d8d6e4dda
Instruction Fuzzy Hash: DA01F4795002408FEB108F29D885762FBE4EF84721F08C0AADD498F352D379E848DEA2

Function 00A4B1D6 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 00A4B208

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 1030358d214688d361fae870222c533a4fe91b7f5da66a60b0a4182b90c9e57a
Instruction ID: 82964a894040eaf71aa50539db73c7a33975cc82a7a71bcfaf1e865d1d4e19cf
Opcode Fuzzy Hash: 1030358d214688d361fae870222c533a4fe91b7f5da66a60b0a4182b90c9e57a
Instruction Fuzzy Hash: B901A2784042409FDB10DF59D8857A5FBE4EF45721F08C4AADD488F252D3B9E404CBB1

Function 00A4A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 00A4A30C

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 85f65a204bd8b23fc3f769150e53f723928b9514597fb2adf5d68b357c13e19f
Instruction ID: 114196997a0de4fad0aeb2e1776f8e0a01c8590526c799fb09d32eca68f0c9bf
Opcode Fuzzy Hash: 85f65a204bd8b23fc3f769150e53f723928b9514597fb2adf5d68b357c13e19f
Instruction Fuzzy Hash: C7F0AF7D5042408FEB209F19D885762FBE4EF54721F08C09ADD494F256E379A844CEA2

Function 00D90C99 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

KM3, xrefs: 00D90D6E, 00D90D73

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID: KM3
API String ID: 0-2912367369
Opcode ID: 9a919c6de343d95a7fe8c5487bb3578146e867b3fb4867dfb66db04a0e52406b
Instruction ID: ba245404dc62b7c1bcff9616c165ca2aabdccdaea5f2804ca11819e026373bb7
Opcode Fuzzy Hash: 9a919c6de343d95a7fe8c5487bb3578146e867b3fb4867dfb66db04a0e52406b
Instruction Fuzzy Hash: 0E210230B006508FCB25EA39D4547AE7BE2AFC5308F89842CD485CB792DF36ED068796

Function 00D90CA8 Relevance: 1.3, Strings: 1, Instructions: 82COMMON

Download Yara Rule

Strings

KM3, xrefs: 00D90D6E, 00D90D73

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID: KM3
API String ID: 0-2912367369
Opcode ID: 5ca572454a7f420962ec78fd72655d3b4d1063a274ab6db21fd6b14b12b6748a
Instruction ID: d824733a0e212a629bf4c0aea74d99dd7cadcc1efe35068942f1986bc27474fc
Opcode Fuzzy Hash: 5ca572454a7f420962ec78fd72655d3b4d1063a274ab6db21fd6b14b12b6748a
Instruction Fuzzy Hash: 0621B1307007148BCB64EB79C45466EBBD6AFC5308B45882CD085DB386DF7AED0687D6

Function 00A4A6D4 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 00A4A748

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: ac4db68bdfc7b8cc763795deacff18e148e8edd57a501ad00928421640369c07
Instruction ID: 940c1a5aebe69af396119754ab8febb2e9b35664035565e2ccc696bdc698a637
Opcode Fuzzy Hash: ac4db68bdfc7b8cc763795deacff18e148e8edd57a501ad00928421640369c07
Instruction Fuzzy Hash: 2A2192B55097C05FDB128B25DC95792BFB4AF57320F0984DBDC858F1A3D2249909C772

Function 00A4A716 Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 00A4A748

Memory Dump Source

Source File: 0000000C.00000002.2956518633.0000000000A4A000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a4a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: afcebe8fa2f2b9a16657c652ed0055b7b53cda47ee278b2773769b8b32999214
Instruction ID: 3e7a4c9792bbbe798268edd8988676e7a978faab03e610f77410138c803dfc56
Opcode Fuzzy Hash: afcebe8fa2f2b9a16657c652ed0055b7b53cda47ee278b2773769b8b32999214
Instruction Fuzzy Hash: 0701F2799002408FEB20CF29D885766FBE4DF54320F18C4AADD49CF252D378E844CEA2

Function 00D90E41 Relevance: 1.2, Instructions: 1190COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b263a9585948f568bab8a0a5d8a140b6e588132ae2bb69af29cf0f1b5d914f28
Instruction ID: 79a3c8b44de48620860109b0b499d3262265e83da8aefa3f1cfe27a2b9908565
Opcode Fuzzy Hash: b263a9585948f568bab8a0a5d8a140b6e588132ae2bb69af29cf0f1b5d914f28
Instruction Fuzzy Hash: 8C61CF34B00215CFDB24EF74D45866EBBE2AF88308F25856AD9059B385DF76DC41CB90

Function 00D902C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a823247ebc10594a3b379e0568872b1b1dd1cc9afc6b7c1860bd5fc39e06de6
Instruction ID: 8072e0c6b089764b0dc47431b1905c617a10616d346fc73c628e7dd9ead28099
Opcode Fuzzy Hash: 9a823247ebc10594a3b379e0568872b1b1dd1cc9afc6b7c1860bd5fc39e06de6
Instruction Fuzzy Hash: 30B18034600710CFDB94EBA5EA5CA5A7BB2FF88359B5484A8D90697399CFB09C01CF60

Function 00D90799 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2afb6137000f25d6320575ff93cfbb61c262d6a6967594f88106e64ec435478
Instruction ID: 6c81bc519e5536ab3dd552ea99cdcbe4dcc15b7b8682e82981772ad3a5737f41
Opcode Fuzzy Hash: d2afb6137000f25d6320575ff93cfbb61c262d6a6967594f88106e64ec435478
Instruction Fuzzy Hash: C1A15D35B002148FDF04ABB8E45976E77B3AFC8308F158869D90697395DF789D428BA1

Function 00D910A5 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffa05fa4c6364425c9d056dc63553b5258441664014433d9ee311b9761aeebe7
Instruction ID: 1b82cdaaeaebbcd7e7c672365988c68a89c2d0fc8ea51cd56d629afb43f83f7a
Opcode Fuzzy Hash: ffa05fa4c6364425c9d056dc63553b5258441664014433d9ee311b9761aeebe7
Instruction Fuzzy Hash: 43315B34B01214CFCB14EBB4D658AADB7F2FF88308B2545AAE9059B355CB76DC41CB90

Function 00D90B8F Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af2d92564de2bba3560be156f817e2f209d923548578c8f14929cd3d985cb201
Instruction ID: a19458c488b17e3527c1d041a128bb67198a57a218054a2dd177f09674d5bb0c
Opcode Fuzzy Hash: af2d92564de2bba3560be156f817e2f209d923548578c8f14929cd3d985cb201
Instruction Fuzzy Hash: E611D335A10118AFCB44DFB4E848DDF7BF2FF88204B154979D506EB266DF71A8068B81

Function 00D90BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29aeba4084e3ab5aa7c0284aafa1ac9b973bb96f8ae7f15d0c5c1748b1096ae6
Instruction ID: 559cef6186dafb912fa3f4b56573cb0e628b6df3ef247d1ac2e561a088354beb
Opcode Fuzzy Hash: 29aeba4084e3ab5aa7c0284aafa1ac9b973bb96f8ae7f15d0c5c1748b1096ae6
Instruction Fuzzy Hash: 2311A731A10118AFCF44ABB4D84CD9E7BF6FF88214B164979D605E7275DF71A80587C1

Function 00BA0807 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957672346.0000000000BA0000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_ba0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22664d01416c1496d8cd471f1293a6cee4a3c1b219388f2958b2eeee8b9c4944
Instruction ID: 13c789c527c0455f56222cc73c9d68fb0f7fd9e5d7efbc773f43a93105b03e7d
Opcode Fuzzy Hash: 22664d01416c1496d8cd471f1293a6cee4a3c1b219388f2958b2eeee8b9c4944
Instruction Fuzzy Hash: 440175B140D3946FD702DB55AC41C57BFF8DF86524B0885AFE8488B242D269A918CBB2

Function 00BA05E3 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957672346.0000000000BA0000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_ba0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b14600bb2e5e1a843aa6145600a49ff384ff1a26960cd3b26b073eb0f44ed62
Instruction ID: 3c667913659d4541350357f59a5f15add9d77f06191c4c14f885ddb4e5391d31
Opcode Fuzzy Hash: 6b14600bb2e5e1a843aa6145600a49ff384ff1a26960cd3b26b073eb0f44ed62
Instruction Fuzzy Hash: 41F086755097906FC7118B15AC41853FFE8EF8623070985ABE8498B612D229B919CBA1

Function 00BA082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957672346.0000000000BA0000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_ba0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f844fc5bd7856d78abbb7bdfebacbad8b5dc8914d6842b3e4627e79662a718b8
Instruction ID: 7fc58c8a3a319558995bea83234450ec2bcf04c2fbdf61e621a0e0405ede5fe3
Opcode Fuzzy Hash: f844fc5bd7856d78abbb7bdfebacbad8b5dc8914d6842b3e4627e79662a718b8
Instruction Fuzzy Hash: 91F082F28052046B9200DF15ED46866F7ECDF85525F04C56AEC488B301E37AA9158AE2

Function 00D90C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0021342a7e14e76c5cc4179b46fc0a0fb17fa1b179e51dedb49b855265357540
Instruction ID: a08cafe1f3aa6a2ad99f62601d136ab0fb2c1430430e64b922c8521f6189e68c
Opcode Fuzzy Hash: 0021342a7e14e76c5cc4179b46fc0a0fb17fa1b179e51dedb49b855265357540
Instruction Fuzzy Hash: 57E0D831F153541FDB04DEF8585419E3FA19B86160B5945BEC044DB392EF3498038381

Function 00BA0606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957672346.0000000000BA0000.00000040.00000020.00020000.00000000.sdmp, Offset: 00BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_ba0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9155fd2ec356ec0df1f3661cbadef7dc3dbb93795bb24f8301eb88e657a3a3b
Instruction ID: 510668ace23f646e18f72b4c241abf64accb7b6ae49f195d00ba0969ebc0854d
Opcode Fuzzy Hash: c9155fd2ec356ec0df1f3661cbadef7dc3dbb93795bb24f8301eb88e657a3a3b
Instruction Fuzzy Hash: D9E092B66006044B9650CF0AEC81462F7D8EB88630708C47FDC0D8B701D239B508CEA5

Function 00D90C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ea8ccadbd828af93719b9fa1b2eba12f466c9a5f97f05f2a44ac6b908f026ac
Instruction ID: 39ff7e62746dd7c1b53e94890a22a7e9155b9db2850cf27886218913666ea102
Opcode Fuzzy Hash: 6ea8ccadbd828af93719b9fa1b2eba12f466c9a5f97f05f2a44ac6b908f026ac
Instruction Fuzzy Hash: 07D01231F042181B8B48EEF9584859E7BEA9B84164B65847ED009D7341EF35E94287D0

Function 00D90E08 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf15b2b3292140f3d635853046e378f3763a37cc425169c6ea132452cf0dcb50
Instruction ID: 72ac711aa1ca4276fa76e6deafd03a46d6ae0d3fa3ad807f3e689296a81f0ed5
Opcode Fuzzy Hash: cf15b2b3292140f3d635853046e378f3763a37cc425169c6ea132452cf0dcb50
Instruction Fuzzy Hash: DFE0C72128A6804FCB068734E82A9993FB05F83308F8AC1EB944CCF6A3CA25C806C310

Function 00D90DD1 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 003cbb87e2655b849906d8e6fe855dcfde42fb0f0b73083315a65c295b3c3ab5
Instruction ID: 43c547938697a94fa62550513e9a184dd366b3d88b643fc4f15ec77aa08d4ad6
Opcode Fuzzy Hash: 003cbb87e2655b849906d8e6fe855dcfde42fb0f0b73083315a65c295b3c3ab5
Instruction Fuzzy Hash: 4ED012202897404FCB059774E4595953F716F82304F4AC5E694488F6A3C664DC46C351

Function 00A423F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2956481248.0000000000A42000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A42000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a42000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26acf41ad64cbd5764cab47b6830e28dacb1167f0128b3a47118ea1b5d179d20
Instruction ID: 2b5b0ed8c18db5f38ae8bd9751cf31ece690493d5ed78430e34f872f0a48ccbb
Opcode Fuzzy Hash: 26acf41ad64cbd5764cab47b6830e28dacb1167f0128b3a47118ea1b5d179d20
Instruction Fuzzy Hash: 43D05E7D2456814FD316DB1CC5A9BA537D4AB91714F8A44F9A800CB7A3C768D981D600

Function 00A423BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2956481248.0000000000A42000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A42000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_a42000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38a0549176c5fb359c57c9f1c79a66bc090a9a066f55d142e5524f62ef671ca4
Instruction ID: 28a96b366451b8789ef3075427cb84fb33da305507dd16a26048ff62d9682d02
Opcode Fuzzy Hash: 38a0549176c5fb359c57c9f1c79a66bc090a9a066f55d142e5524f62ef671ca4
Instruction Fuzzy Hash: BCD05E382002818BD719DF1CC2D4F5933E4AB80714F0644E8BC108F262C7A8ECC0DA00

Function 00D90E18 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3353e7c8083aff0eaaa0bdc0c05f5fabf5e4a4d4db42bcaa6b9decbbbe1021e
Instruction ID: 0f7154be69dd917099ef390653a382506424767c7ec9290e7c260e601c140a31
Opcode Fuzzy Hash: e3353e7c8083aff0eaaa0bdc0c05f5fabf5e4a4d4db42bcaa6b9decbbbe1021e
Instruction Fuzzy Hash: 23C012313002088FCB04A768E51DA297BD96BC4308F99C56594081B256CB74EC40C694

Function 00D90DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2957844230.0000000000D90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_d90000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aea2d42d0cf289680707afe5d97bd52e4df6da8ae53e5b16989b5d589e6c40b6
Instruction ID: 9dff24ce02b78992de0691544acb1102fb6d2d1c07536fef5ab90bdf2aa7ea10
Opcode Fuzzy Hash: aea2d42d0cf289680707afe5d97bd52e4df6da8ae53e5b16989b5d589e6c40b6
Instruction Fuzzy Hash: 07C012303002048FCB04A768E41DA2577E66BC0308F59C56494080B256CB74EC40C694

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\unarchiver.log

C:\Users\user\Downloads\DETALLE DE ACTUACI.N JUDICIAL RAD.05000312110120220006501.zip.crdownload (copy)

C:\Users\user\Downloads\c3927b69-e6ed-4616-98de-ad31d2b75efd.tmp

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Static File Info

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: chrome.exePID: 2192, Parent PID: 5812

General

Chronological Activities

Windows Analysis Report
https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N

Function 0104B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Function 0104AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Function 0104AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Function 0104A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Function 0104A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Function 0104B4FF Relevance: 1.6, APIs: 1, Instructions: 83
registryCOMMON

Function 0104AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0104B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0104A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Function 0104A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Function 0104A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Function 0104A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Function 0104A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Function 0104AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Function 0104A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON